Extracted

• • Target
    36d06cd38ea0944720a416198fa48dbd0cee74d057b547778de911094cc7beab
  • Size 45KB
  • SHA256 36d06cd38ea0944720a416198fa48dbd0cee74d057b547778de911094cc7beab
  • MD5 1f8e27141e1f92931ae77064859c7d12
  • SHA1 ad9a639c8ba9ec6c556e6941b3ade9c0e2bbbf28
  • SHA512 1fbf421e97d6afc65149e8685f2554cda156c8f083fe86c30345b216e427531124ab5c20bfc08c8852b8447e35de3aa9d4fcd87e6d7e3a4178e2e533acf35b3f
  • SSDEEP 768:suJdpTP3tcsWUODmqmo2qVNHUttXAPIMzjbtgX3z4fEeJHkRrlBDZkx:suJdpTPdI2U0rXlM3b6Xj4FpkRrrdkx
  • TLSH
    T192232A003BE9812BF2BE4F78ADF26145467AF6637603D64A1CC4519B5623FC6CA026FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2