Extracted

• • Target
    b76f66dd07008dae78846ee4689c8da72a84296f939eb9d2a1b5a115f35e5a5d
  • Size 45KB
  • SHA256 b76f66dd07008dae78846ee4689c8da72a84296f939eb9d2a1b5a115f35e5a5d
  • MD5 a9929c0cf3a234c1d51d5dadaa71fecc
  • SHA1 711107283eb4c85dd7763c9e28c26f4a2b334be2
  • SHA512 ffd95899a970a05caf96668f2092344c3dbf4fa474bcae8e88d8d9ead14ca322ba001100d7211a3f762f3a88dac39d1c6a3731226ed201b7e9209eb094a63287
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9ICXtTt/PIZzjbMgX3i4dQFDwDBP5LBDZsx:EulCJTHl42fwuZ3bDXS4dQZwD5dsx
  • TLSH
    T1FB231C0037D8C12BF2BE4B78ACF251458A7AF6673603D58D2CC451DA5623FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2