Extracted

• • Target
    4eb53f65623dae5fb2a42ff21e1650cf6f9b149fe7b418a6f3427700e272c3a7
  • Size 45KB
  • SHA256 4eb53f65623dae5fb2a42ff21e1650cf6f9b149fe7b418a6f3427700e272c3a7
  • MD5 ea036aace3706ea844ed9ca114d6e970
  • SHA1 be4c99fea3e11dd577c90d8fbe8703997df3e75d
  • SHA512 6412a2958deaf7c69ce652ab67c01dc4c9fd0c5aab916fb63c54687d3926822c43f9a7866da3ecb57c7148569fd0fb4e37291cec0ad9a94733ac456422d66094
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVu8kLyuObvtkjZPICzjbagXliuIO/J7Vz1IkBDZEx:MuBGJTPho2H8LuyyjWC3bNX0uIOZzdEx
  • TLSH
    T125232B0037E9C12BF2BE4F7898F26145867AF6672603D54D1CC451CB5A23FC69A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2