Extracted

• • Target
    74dfd653351d2bc6481c14f1d2b97f6f0ed419da2c54dddf943b60e992ab495c
  • Size 45KB
  • SHA256 74dfd653351d2bc6481c14f1d2b97f6f0ed419da2c54dddf943b60e992ab495c
  • MD5 885ac252d46134e251a40f486a09e1e4
  • SHA1 2bf13936f1fcc7008efe156880b80644c677d52c
  • SHA512 accd37de69e3687e9df1572803f20e2ead368a380e57cc58dd55ae1fb55dace398faeab2b3bae1bf89fd31b4a008e384d1dcbb2c734747da23b7af441c6c634c
  • SSDEEP 768:cuqb5TrIGuCWUoKXMmo2qQG3HE4eVoOPIGEzjbjg83iCJOzcFV0lRKSJOQeBDZUx:cuqb5TrhG2yU1o3GE3b88SCRWlsQOQw0
  • TLSH
    T136231A003BE8812BF2BE4F7898F26145867AF6A37603D54A1CC451DB5713FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2