Extracted

• • Target
    e62b3ded35d2d870669f77af5c99161da86b4694549952e608c3dfae1c731470
  • Size 45KB
  • SHA256 e62b3ded35d2d870669f77af5c99161da86b4694549952e608c3dfae1c731470
  • MD5 4ea1091d8c43672a23cac0a4fc0b6239
  • SHA1 f7a7e0b9999db9b94a6366e9f62bb0011b9a7201
  • SHA512 e46eafe88438c6e3b074d5c9d0e98803807f59d5a49a94c6f3cdc3dd87b634e2ce8e97fda267d50fb6861cac874d53130a4d374b281bdf4567f1646ce7b13c2d
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1fLiE0yFjrdjYkk8PIu6jb5gX3iEvAo6vvugFBDZUx:cuR0JTPjY2SLBXQBuWbWXSEvdivuYdUx
  • TLSH
    T17D231A003BE9812BF1BE4F7859F26145867AF5733603D64A1CC451DB5B23BC68A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2