Extracted

• • Target
    12e58c56092b8774967f9e0d2b3fc092ba8f55b3c8b4f94de6cc225181d812c3
  • Size 45KB
  • SHA256 12e58c56092b8774967f9e0d2b3fc092ba8f55b3c8b4f94de6cc225181d812c3
  • MD5 ec04b7ba41b61e0eee5628ebf8bceedd
  • SHA1 a22fcb890399da3ca6bc0a177851d1cc48aece6f
  • SHA512 c9197954afd7d97c280fc70ed31820f054126da89240c1b94a6f3b75a9fd1c9fef35b6eeebf811990cc5364b8d94e36134b17d081dd0394c365d53f87549ce83
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFTls5ohEaMPISqjbzgX3igGEs2LUo6EIFBDZUx:cu7e5TH2A2m44EaxSmbsXSzEPLUomdUx
  • TLSH
    T11B233B003BE8C227F2BE4F789DF26245467AF6637603D5492CC4429B5613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2