Extracted

• • Target
    7138090681b4e881a7b05a0f719fd07eea81707b80cc76e79a50272b3440cc9c
  • Size 45KB
  • SHA256 7138090681b4e881a7b05a0f719fd07eea81707b80cc76e79a50272b3440cc9c
  • MD5 85af55f4d19fa428d2d41e586464eb8e
  • SHA1 f3729dcf5ea99a58a28d144fb34230b0b9fb98f9
  • SHA512 df67e5870015170348ba97a6f498cadde7be90ab4fd3b2178f1999d53d80bc1a150f438d70ed495f1470ce99fd9ca5d3f0ad202efc2c2bc029fa5633b850444b
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9r9wSkq/z1OPIozjbsgz3ibBrPFz6eL0zGi5BDZsx:EufspTf2g2miVK3o3bjzSbBBz6eLqrdu
  • TLSH
    T11D2309003BE9C12BF2BE4F7899F26145867AB2733603D64A1CC451DB5713BC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2