Extracted

• • Target
    698425dd5fb868eeff1ac079fd772a4e3bf146d13609fb57349b2c83d0c330b5
  • Size 45KB
  • SHA256 698425dd5fb868eeff1ac079fd772a4e3bf146d13609fb57349b2c83d0c330b5
  • MD5 bc499d00070a10ba634d53c2b88fc6e4
  • SHA1 44d14f2f7281f79dd347424955c3dec2ebba2f33
  • SHA512 1e14863cf6a39e6ce4860302dd19ccf47020dd9c42d8919f269a5c146ff6d2c6ea47578ba49b71e578d2855f8308ef1e3e02adb951b970f77f5fee866950126a
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9Ewz/y3qiPI3zjbOgX3iI/dEO8YPK3IG0W+g7BDZsx:EufspTf2g2v0h33bxXSnO8YPKgW1dsx
  • TLSH
    T1EE232A003BE9C12BF2BF4F74A9F26145467AF6632A03D6491CC451DB5713FC68A42AFA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2