Extracted

• • Target
    fddffca6b7e812aaf6ccd9ff4f3473470087d77c875c2fff0aaa0dc675d85bfe
  • Size 45KB
  • SHA256 fddffca6b7e812aaf6ccd9ff4f3473470087d77c875c2fff0aaa0dc675d85bfe
  • MD5 a39fb4e6821c358109f7e87f8d32e2a8
  • SHA1 2114add96dfa32c8affda1626c7c39ed093bbfb3
  • SHA512 a7abebee2b3e23b8f8290c971ecc9b25ae1e5f282f2b29f60f136f18df53796b635e61f8d3dfe9ac7c452d7c76f1234216e081d338536e4b623a2d03f472a069
  • SSDEEP 768:cuqb5TrIGuCWUoKXMmo2qQn3FoDEaOPIzzjb9gX3iAYo2q4vBDZUx:cuqb5TrhG2BKEa3z3bqXSP53ZdUx
  • TLSH
    T14E232A003BE88227F2BE4FB898F26145467EF5636603D5892CC451DB5B13FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2