Extracted

• • Target
    30549b8ce6a0c0bb54b909911cede6a5afdac3f12057f70b72e0acf9b7cd78d2
  • Size 45KB
  • SHA256 30549b8ce6a0c0bb54b909911cede6a5afdac3f12057f70b72e0acf9b7cd78d2
  • MD5 1df4797b4ea163a05fc6fec45d5680e7
  • SHA1 5568cecf17b23fb9788a1d09c32bb1ec61d49f58
  • SHA512 85a9582e027eea43e0709506cf700485d0c8b1d9a4f1a57c3d9dbb6e6d51f07cb0de8ec340bd6e9531fa2bac7138cd740f4de234a698e562d83521cb8a9d4857
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1Z0ewnScqe5iZPIEzjbqgX3iI2BPLyzpzHJBDZUx:cuR0JTPjY2AwSMiWE3b9XSI2YVzHXdUx
  • TLSH
    T101232B003BE8812BF2BE4F7869F26145867AF6632503E54A1CC451DB5723FC69A436FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2