Extracted

• • Target
    c4ed7afc5d8987b1c3294adce743c492d91b0cf0846d3e7928353923ac8e9466
  • Size 45KB
  • SHA256 c4ed7afc5d8987b1c3294adce743c492d91b0cf0846d3e7928353923ac8e9466
  • MD5 0d6874fa64b3590960533e134ca87548
  • SHA1 819ca9c2bc8725dfaeb6b9d6a44b771f6737e195
  • SHA512 a67f46572ebb0fb7a31e90e728c003870ff2e20f6a32bf925bf141e5c0c2e9f96d02a45b4d13ae0c665ea0dd9f3caaff451a3a90c96ee52be6e2e5b1ce69a697
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1w0b3NEAteiZPISzjbmg73iMiW6ibHbZRBDZUx:cuR0JTPjY2a3ehiWS3b57SMkC1dUx
  • TLSH
    T12F232B003BE9812BF2BE4F78A9F26245867AF6733603D54A1CC451DB5613FC68643AED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2