Extracted

• • Target
    f3017846159046588e1aa5ae39da3c6bd079a1a796ab8fc52c50e1e1299875e4
  • Size 45KB
  • SHA256 f3017846159046588e1aa5ae39da3c6bd079a1a796ab8fc52c50e1e1299875e4
  • MD5 daeb11db72ca555e7939f5bf2ab9e18f
  • SHA1 0c462074a917f4b1456fc6aaab2ebe47dbdedc83
  • SHA512 3fca0cf5e3927eb8d5bf9e79d229aa17229bcf2553b2a365bc5b2207df2c7415b4f1669ac51a98ba560978a05505b6ef670202d995305fb4a423fdd642039103
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVe8V1RpPEcPIMzjbwgX3iKoAfAcS9kiBDZEx:MuBGJTPho2t8VDZEhM3b3XSKjfBSndEx
  • TLSH
    T12C230A0037E8812BF2BE4F789DF26145867AF6633502D54E1CC4519B5613FC6DA826FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2