Extracted

• • Target
    a0860d68338341caf0b47aa9d116563f4bcc6e7c7ba6bf2b4e7c322b835639e3
  • Size 45KB
  • SHA256 a0860d68338341caf0b47aa9d116563f4bcc6e7c7ba6bf2b4e7c322b835639e3
  • MD5 80be04755ea619bbe4429e1fddab51e8
  • SHA1 773b906c7ba00c42078ef591a175d72e0fb283ca
  • SHA512 02f2b126f77bea0a36242b6e75e32d2dddff65e32882c336e754200d7f9feed04a715c97be75c4fb5b78a2b89bfd5480032e2c0db5ec17182ca91d2d1ec882f0
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVe8V1RpYEcPIazjbzgX3i57PCuGTDDZskM+IBDZEx:MuBGJTPho2t8VDeEha3bsXSFlG3DZxuE
  • TLSH
    T10B232B0037E9812BF2BE4F78ADF25245867AB2673603D64D1CC4519B1613FC69A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2