Extracted

• • Target
    41a68caaacf2607befd65efbf2c67111c8853ee94eae6c0e7fdd5390d8f2122a
  • Size 45KB
  • SHA256 41a68caaacf2607befd65efbf2c67111c8853ee94eae6c0e7fdd5390d8f2122a
  • MD5 0d2fac3538ece0993f50bd42ed94dffc
  • SHA1 ad6eedea2419e837024a198db056b008fd16b349
  • SHA512 c8369e1bcfd84d0f36638bc5e639aa0ff0c9b3948311bd79bb964b639e6e84abcbb024093525a17ab3c03cdf1ebead3cfb777b174e850a100c08300a7ee144e2
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFOeeXKGoibbb6tN8/nPI6DzjbGgX3ij7gSZ++FldWsv:MuLAZTnbg2aeDqtNKA6D3bZXSXgSZ++z
  • TLSH
    T14D231B003BE8812BF2BF4B7899F261458A7AF2773603D65A1CC4519B5713BC68A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2