Extracted

• • Target
    46394b709f0d5be84a5fc68d13d27f309a301f7fd1c5e3f0e9fc804221f2dd6c
  • Size 45KB
  • SHA256 46394b709f0d5be84a5fc68d13d27f309a301f7fd1c5e3f0e9fc804221f2dd6c
  • MD5 b5cf40ae16f09d4533e196be27659f3f
  • SHA1 9957238c0b84b64220e0683bd8278d4fad18c7db
  • SHA512 57b6fc1386d7de483a41e67e4fc6ea44e7073cb724b5736803c366acd234cf45ed3647412fc0ab22dae53b30a1f2523448b67153c1127b0d756092c2590fd226
  • SSDEEP 768:8uUIpT4vvofWWUEXb+Imo2q4riD8yfzuOPIZzjbHgX0iWz2vWnDkBDZ0x:8uUIpT4vAj2/iAJ3Z3bAXRWznDSd0x
  • TLSH
    T120232A003BE9812BF2BE4F789DF26145867AF6633603D64A1CC451971723FC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2