Extracted

• • Target
    de5017c541bb7b0702cb6a5d5cc720fbbbcfcc7047b5a26f462bd5d6a503d5ff
  • Size 45KB
  • SHA256 de5017c541bb7b0702cb6a5d5cc720fbbbcfcc7047b5a26f462bd5d6a503d5ff
  • MD5 b59268cb35aeb38ab46c6b6ba0214bb2
  • SHA1 3d91181b3456248df74d10186809c2da09e680bd
  • SHA512 cb5b6a75286bbb75309793a23e0ebd3947363b8b608855abe0eb6fa5eb58f27864cd6607411146bc990c931a072a17d2036cc0c23e5a99b0b9609bde71c3c871
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFA7lt440WMOPI0szjbwgX3iRx3WhsPP9vEvBBDZEx:MuLAZTnbg2VgUM30s3b3XSRx3ei1cv/E
  • TLSH
    T1EA231A003BE8812BF2BE4F78ACF26145867AF5736603D68E1CC4519B5613FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2