Extracted

• • Target
    dd4c01347636b26a224f3e557ef486ea189cb7671b7a92c902d87608c2534065
  • Size 45KB
  • SHA256 42dc5d15a3ddceca2823da62c6466ac19740b9e8ae2aed96421d9fff6c9a80ca
  • MD5 64d4984ca6c7c2d37c7fc6a6831e2fd1
  • SHA1 bc258c0058ff5a2f311798ce6b7872a8c222d4b2
  • SHA512 3a69c2798a8102730ad9c43dd3a02d4607fae91061b0cadc830b48d0c148deff1c29da87459a61c81efe5e4c3f87fc3e0163b74f30d860a5889459d553d9cb36
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFJhk6K7OOPIzzjbOgh3i4ZfRFgo8BDZUx:cu7e5TH2A2w6VO3z3bxhSeXgoadUx
  • TLSH
    T1BA232B003BE8812BF2BE4F74ACF26145867AF6637603D54A1CC451DB5A13FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2