Extracted

• • Target
    fa43eca9435fe154cc60aa96de6e4cf30449a56196f821fd5d626eb476e0473e
  • Size 45KB
  • SHA256 fa43eca9435fe154cc60aa96de6e4cf30449a56196f821fd5d626eb476e0473e
  • MD5 a957c87f2dca452e2536b48bf91d937a
  • SHA1 be1273411089f54825df04382ff723dc9d398648
  • SHA512 a857ecb1139076f3809e436c9faa142254d98f4c22b52aa1f0a10e7eb7efbbd15f7fcfd5b2a712f47f45c6270991bf4b1345e0456649e9d5c27f27d07e361b00
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1exGQG9PHuPIczjb7g23i7Y5U4hBDZUx:cu6YepTPso27HC3c3bE2S4U+dUx
  • TLSH
    T196231A0037E9822BF2BE5FB4A8F26145867EF2672603D6492CC451DB5713FC68A426ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2