Extracted

• • Target
    ccd93d3b390c245c9a3ad36f05b0f956c35cc90fdbcd9d4b3fd5d5c64e1991c0
  • Size 45KB
  • SHA256 ccd93d3b390c245c9a3ad36f05b0f956c35cc90fdbcd9d4b3fd5d5c64e1991c0
  • MD5 f46d8524142c78fdfda09ca82c7ba216
  • SHA1 e00067632c2007a5ee7ce5838f53bb77d0d2a0a6
  • SHA512 77174b607865ef8b492784b007514499ff19ae712278a93f0a47d8f034dbe06e5b97d64e1551f4e6480f64b2ea1773b24d0b1ca57d08473c1a7c6437f6a3d18f
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q17xJaxrPHuPIHzjb+gP3i3s4NWHiqnLBDZUx:cu6YepTPso2eeR3H3bBPS3sIWCgdUx
  • TLSH
    T1CA232B0037E9812BF2BE4FB499F26145867AF2673603D94D2CC451DB5723FC68A426EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2