Extracted

• • Target
    c3d58d26b187e9412c551a259392a301fa994722459e7f2c2e20f2ae7d1b0003
  • Size 45KB
  • SHA256 c3d58d26b187e9412c551a259392a301fa994722459e7f2c2e20f2ae7d1b0003
  • MD5 257daa6af83a75c12dee630e2d1c0b46
  • SHA1 d5b379875ebb02c57eee9c2905e10d029fca2992
  • SHA512 40e214d29daecf13387d20a4dff025ba9102f734384e2d868619094f1a23210dae52632baf339ee1660717632d71b620cc7e5fd8d8dbfd54c9a5b0db376d0a35
  • SSDEEP 768:cuq04JTLcsP8EWUmOTymo2qA+fkLyuObvtkjZPIuzjbDgXOisOnMJ0U44tGEBDZW:cuqNJTLr62ufLuyyjWu3bcX3sOGn7dUx
  • TLSH
    T1B7232C003BE9812BF2BE4B7858F26245867EF6736603D58A1CC451DB5713FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2