Extracted

• • Target
    b464474026c7dab76be2bb4b78a3857ed86cab12d26d973c2afc6a6da6d3eb2f
  • Size 45KB
  • SHA256 b464474026c7dab76be2bb4b78a3857ed86cab12d26d973c2afc6a6da6d3eb2f
  • MD5 ff1f0b3348fe83a87630b37f673c3216
  • SHA1 8c244b1830e077936a7eb658486c672fa10c7b11
  • SHA512 896e37a2f7656e611a50c4a045e7ab8b6d08bbb92ca99b6cc9a0fda0b973bb78f65a3952be12f5e2f3365266b6d5c9d5a341b3a03db34150bbd4f05d932f1cc1
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9cx1HJhOPIcozjbygh3iGvxAhJmrLlBDZsx:EulCJTHl42tFj3co3b1hSGmaLrdsx
  • TLSH
    T1E2231A0037E8822BF2BE4F78A9F26145867EB6637603D58E1CC4519B5613FC58A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2