Extracted

• • Target
    0eb7e4e78466f98cd44d1add543f4a788458cbda3d9fb8e14c3327e85da75a46
  • Size 45KB
  • SHA256 0eb7e4e78466f98cd44d1add543f4a788458cbda3d9fb8e14c3327e85da75a46
  • MD5 eb9da77d1f5be3e0374dbeea73357466
  • SHA1 c966d83b87678388abf29761ae86618ce15fcb26
  • SHA512 62a91679512e3af28a410487a3fb26ed25996804264bb32fb7cd9f9368c585242a54078e12d2430a865480dbd485dbd4122205976156dc333bed831fbb89b3de
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q94O5QyCBjHSNjPIwzjbkgX3iRdVtn6gBDZsx:EufspTf2g2hO59ESKw3brXSdtn62dsx
  • TLSH
    T10C233B003BE9C12BF2BE4F74A8F22145867AF6637603E54A2CC451DB5613FC696426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2