Extracted

• • Target
    d1711d867fe0a05c211566b0f3c8e40fefe35a1d727e3bacb85a1e9f328b88c0
  • Size 45KB
  • SHA256 d1711d867fe0a05c211566b0f3c8e40fefe35a1d727e3bacb85a1e9f328b88c0
  • MD5 144fab2165226ac6760f8d48c9ce41ca
  • SHA1 3eab061194871a14e49944d5620798aad74477ad
  • SHA512 fed4b4a09c460c61642d16d68007609a4f75f8bbd5cc126065458a8a72448b477ba95f7549f85a143ecb02384e27ab671c464090f4aab78c64df22051424d0e1
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9LqAYaayNPIHzjbvgX3bc3rN80y3Dh4VW3RuaGS+Bc:EufspTf2g2WqzqqH3bYXL2rN802hG8b1
  • TLSH
    T141232B0037E8812BF2BE5F78ACF26145867AF5637603D54A1CC452DB5A13FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2