Extracted

• • Target
    0af71ceca0c2fc4a06e1efabd24cb39e43ba172ee9864ba2154adcf7f5b6f46d
  • Size 45KB
  • SHA256 0af71ceca0c2fc4a06e1efabd24cb39e43ba172ee9864ba2154adcf7f5b6f46d
  • MD5 f5ec6119b3eaff404b7aa80940f6547f
  • SHA1 2567b82ddb9b21fc7c72c5a27fedd90a20f9ece4
  • SHA512 45dba25c9cc71230f5f234a7c18c5020b95d68fce79d2ae1518101e099bdac14a16e25da073509da36228ebdc1382d2850f290df4159b639bd2b5495e5f51a00
  • SSDEEP 768:vuogpT78XvEsWUOsRzqmo2qrLxJdxrPHuPIbzjbkg53i//vsD78gpBhPoIC/gOan:vuogpT7I62YxR3b3br5S/ns/bfSIC/g5
  • TLSH
    T101232C003BE8812BF2BE4FB8ACF26145467AF5633603D9492CC451DB5623FC68A526FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2