Extracted

• • Target
    57c4012e3fe877c4f3973b6fbcb4c90b9b08528ec238c2c40607b103db736856
  • Size 45KB
  • SHA256 57c4012e3fe877c4f3973b6fbcb4c90b9b08528ec238c2c40607b103db736856
  • MD5 f9044a7975ce786c693c262ba5828a89
  • SHA1 00bd4ae7f53b9dc6c7133057023973929fcade02
  • SHA512 7ce8318ad5d272d137829424c055c5512f1fddaa179c09d0092322199cef54d1c47cec7e7aa8aec89943230a5431348d74df43d7a9b071435cdd66873c92f5ff
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qViqyx0OFUwdrxIkDPIOzjbsgX3iwHYfzzJXERQNyHm:MuBGJTPho2fqKTNMO3bjXSwHYnwdEx
  • TLSH
    T135231A0037E9812BF2BE4B7859F26145867AF5733603D64A1CC451DB5B23BC68643AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2