Extracted

• • Target
    4ec6965d189ce0ec04d1bdab0076393195795eb885624decdf1d3054f855b53e
  • Size 45KB
  • SHA256 4ec6965d189ce0ec04d1bdab0076393195795eb885624decdf1d3054f855b53e
  • MD5 3a345ae542a65b0a495f24be165ebb1f
  • SHA1 ea151e455073657c0a513baef5ca10d794e94081
  • SHA512 ac003ad327c86df83d6f215bfbde75e3a19912acbe9d90105cd3ccd89b599fa0a5008aa3e7c9b61c9c693636755b051d8b2dd40a3b3ee7d529280d026c9aa0da
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1LT2QAm7PI1UjbJgX3in65BVTf9GC5BDZUx:cu6YepTPso2JT10bGXSnaBVTf9dndUx
  • TLSH
    T18E231A003BE8822BF2BE5FB869F26145467AF5733603D54D2CC4529B5613FC6CA426FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2