Extracted

• • Target
    895e9b5c7c89f45d2bf40ab27f944bb49fcefa3bef476626758669982fee30ad
  • Size 45KB
  • SHA256 895e9b5c7c89f45d2bf40ab27f944bb49fcefa3bef476626758669982fee30ad
  • MD5 998ccd3ed1122b8bd84b0c4ba8d29c97
  • SHA1 606587a788c523a8483714115745735437380d86
  • SHA512 38e99131cf32518ec492127047360797abbd8980f37b4d990e9cdd76dc6078b06630074ba8b64373f498df18ef86d40f8b385bc02c6af4718f68c28c1433f52c
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAUqyE0OFUwdJxIkDPI1zjbpgX3ibC25XiC+fXyB1bmB:kuSOpTPOP2EqNTLM13bmXSW2sWzbJnL0
  • TLSH
    T1C6232A0037E9C22BF2BE4F7899F26241867AF6733603D5491C8451DB5A23FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2