Extracted

• • Target
    81c5649423d4da00edc3cb5cd93ba18bde886cc4682760f4a9b3f508b7b9241f
  • Size 45KB
  • SHA256 81c5649423d4da00edc3cb5cd93ba18bde886cc4682760f4a9b3f508b7b9241f
  • MD5 b10f1e4ec0438783c4d81489c9e026c0
  • SHA1 76203b8197acadf42eda2fc03c129ad25f43e67f
  • SHA512 9f2e1f473bb118ac8d4aa0fcbc1c72f48bab25f4f40919061ad5265db8bdcba5c5664c0f87c75bcb17620d8217b93fa9769be48827e3ab9a8fd9e6cded3803d6
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFOeeXK5o5TN8/nPI6EzjbngX3iXca9RmulPO7BDZEx:MuLAZTnbg2aeEoTNKA6E3bgXSXca97uE
  • TLSH
    T1D3232A003BE88127F2BF4BB8A9F26145867AF2736603D55A1CC4529B5713FC686426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2