Extracted

• • Target
    aef46591d4d9395bd522c1ce2493e3a65f8349f0b44f16905f2579703452f79e
  • Size 45KB
  • SHA256 aef46591d4d9395bd522c1ce2493e3a65f8349f0b44f16905f2579703452f79e
  • MD5 3a769ef8501f29afa746e8dd55c913e5
  • SHA1 9ec13b63368a1f7a2290d32fbce641c71a89b761
  • SHA512 e1d7e04d5ffdcc51dedc27238be6f3b6b42ccb67043af0e4fb9644d44bd892152ce0134c2435440ab4329fc11df570c4e731b2dab49232893c26caf8eb9b90dc
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9T9oa0y/zFOPIVzjbhgu3iHi0WIl+7l3MBDZsx:EufspTf2g2Oadi3V3bOuSHi3n7l3Kdsx
  • TLSH
    T1AA231A003BE8C12BF2BE4F7899F26145867AF2673602D64E1CC451DB5713BC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2