Extracted

• • Target
    030d66ab4f8782d61e5910accda228ed0b4c15d1bcf9dc5663dfe4ee53694f40
  • Size 45KB
  • SHA256 030d66ab4f8782d61e5910accda228ed0b4c15d1bcf9dc5663dfe4ee53694f40
  • MD5 a6f76b1dd169326e1dfb0e3a61d6cb2c
  • SHA1 cc00f1c276e5dcd390c646953da3d47396c07ecb
  • SHA512 d9caa21536320529aab257ceb2615a3926ef86104471d07d11fcce90d50a484863ae8fd5a263d556e8580f3888dc866e7caf148b8fb8e80d8391485051ebebb9
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVdcP0pycvHPIjzjbsgX3iiMYBxJeEBDZEx:MuBGJTPho2OccMcvgj3bjXS45dEx
  • TLSH
    T1D5232C003BE9853BF2BE4F78A8F26145867AF6633603D5491CC451DB5723BC68642AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2