Extracted

• • Target
    6e25b70a3ebcce2366cde8ef50e17af26f0ed630e8eb542ecd78e7ebab3fe2ac
  • Size 45KB
  • SHA256 6e25b70a3ebcce2366cde8ef50e17af26f0ed630e8eb542ecd78e7ebab3fe2ac
  • MD5 fc9b64c7ca7ca6016aa891030be9c9b6
  • SHA1 03d451ac357800271859b49e41db1db1b7facf39
  • SHA512 84f4a75c59e37f1b82e7385f61f82e23d4728b5edabf7ccb2c13bd22c8b6754f857c4b8c219e22ed23f4cf00b6f2a728616e859177571114da17eb9d18668f2f
  • SSDEEP 768:ku40ZTX3uXTaWUgzW0mo2qwQ3HE4eVoOPIGjzjbxgI3iHhhahgXkFIgV8BDZMx:ku40ZTXEb2sU1o3Gj3b+ISj+GkFIgIdO
  • TLSH
    T15A2319003BE8812BF2BE4FB898F26145467AF6737603D5491CC452DB4713FC69A526EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2