Extracted

• • Target
    0c3bdb4ed10e7ca7adf74e1e5bed402edbe65c700d3190bb18a3b5da7cc49662
  • Size 45KB
  • SHA256 0c3bdb4ed10e7ca7adf74e1e5bed402edbe65c700d3190bb18a3b5da7cc49662
  • MD5 ddc02ccbd06f0ea32c9799915c47a251
  • SHA1 3161f2809db1cffb6b39bff848870eeb51a47df8
  • SHA512 34cf5548a7df67fd0e900a14bcc43f32f62478b20315ca56f50cd5f8b85716164bee8e59f17b0b0eb3120fd1214eb7cd826dc0518792168ef2130d078390389c
  • SSDEEP 768:0u2vpTD4U2ieWUsqfAmo2qjwcQSCBrPqNLPI3zjbogX3iJFhlrXWAHQ09OkTBDZ+:0u2vpTDe+2Hc9EqC33b/XSJ3xWAHz9vM
  • TLSH
    T1EB232A003BE8C12BF27E4F7898F26145867AF6637603E54A2CC442DB5613FC69642AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2