Extracted

• • Target
    3155f6f3f740a289acdadbdda201e9a8bb2550f11cbf2af0fea0e1c02cd01989
  • Size 45KB
  • SHA256 3155f6f3f740a289acdadbdda201e9a8bb2550f11cbf2af0fea0e1c02cd01989
  • MD5 ab46b2d1842bd80e177c1298269c0bfd
  • SHA1 a580a5e50f62ebf7efb9e1fb987fea82a918d4d7
  • SHA512 79e86693260ae4a53ef5754cd1dc8752a8091b66e4d96cdd943a55aa62b038342d597d05aed8e48687621a57ab8f2a6bb699409da15095eb9783ff8b6cb74a37
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFV3xY6AZOOPILzjbYg73ix9lL3dpOOjwBDZUx:cu7e5TH2A2kulO3L3bP7SLlr5jmdUx
  • TLSH
    T1AA233B003BE9812BF2BE4F7899F26145467AF6733603D5491CC442DB5613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2