Extracted

• • Target
    6b3b25f7eb2432e48bd1c3c727a283b84c4c4ab706281dc14560e4ef56da613c
  • Size 45KB
  • SHA256 6b3b25f7eb2432e48bd1c3c727a283b84c4c4ab706281dc14560e4ef56da613c
  • MD5 6cb42b2d8b7567ccf0fa7f8114b55e45
  • SHA1 9e53cc081465f33c1a893d5017b20c0c898732e5
  • SHA512 787176286e7a57d75ed190e59976d38be097d84909196c89ab69185c411472a17607aea8943d7f66232c9501856b4347e0fbd83a0af1c456dc25f608ce6d1b53
  • SSDEEP 768:8uuSpTg7GBoWUSH6+mo2qY2RzMwnOPIZzjbogX3iX72Nj8uviAscFWBDZ0x:8uuSpTgyf2iA+3Z3b/XSX72NjpviAmd2
  • TLSH
    T163232A003BE8812BF2BE4F78ADF26145467AF6673603D58E1CC4519B5613FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2