Extracted

• • Target
    ef8c06d2e83408a340201a431c551cfa69915bd3dc7a0f79421c2da3e2c901dc
  • Size 45KB
  • SHA256 ef8c06d2e83408a340201a431c551cfa69915bd3dc7a0f79421c2da3e2c901dc
  • MD5 a017b6d2d79f5aabbad998c0f046b480
  • SHA1 4f0c6a1869af5d5fab352a4d6276f24c4d119a4e
  • SHA512 1d7e1a017b6f9951101260fa06dfe0b334a6d0adc4ccc39345fa240ab86add1e02aaa61a5b814132e0e4ef97baf67b0919527b8c05a3d09aba5ad277c00374f9
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q95dR3aI6OPIuzjbXgs3i6aBVZiSiBj9LmBDZsx:EulCJTHl42mjqb3u3bwsShBV8HLodsx
  • TLSH
    T1F2232A0037E8C22BF2BE4F7899F26146867AF6673603D54D1CC451DB5623FC68A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2