Extracted

• • Target
    f29ca096894d10d5763521ed701dd091197d709d6a2313dc5c3055785126d4ea
  • Size 45KB
  • SHA256 f29ca096894d10d5763521ed701dd091197d709d6a2313dc5c3055785126d4ea
  • MD5 c58c24223bb6185d4ebf41a05d431715
  • SHA1 89d227e9faab1c4f0442f4f11d9999d58b8247bb
  • SHA512 0340b649158ba049843584f3bfa5b3d1aa9d622b1c2573b2ca89c7cb1dba0ac143e965bab0cf6b0d3d63769d7dd3353c2dbb9b929babe1820a1d5bc1a7ff1cba
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q4rSi0ynzuOPIbzjbzgX2iUA2tzPr69X+21BDZ0x:8uUIpT4vAj2/SVh3b3bsX/V2tzTOtd0x
  • TLSH
    T15A232A003BE9812BF2BE4F789DF26105867AF6672603D64A1CC451DB5713FC28A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2