Extracted

• • Target
    2693cf98a6001519a2a1101d3c67b296bcae24ef91d287713695a1a0b20a48ef
  • Size 45KB
  • SHA256 2693cf98a6001519a2a1101d3c67b296bcae24ef91d287713695a1a0b20a48ef
  • MD5 1ae63b8a16e44ee04bb04cfb8e55eceb
  • SHA1 54b4b10c28c30e87785ed267a43f3a8ed3efd341
  • SHA512 36c5a99d243cbfeb8bb2d0ff1c219f03dd6b27cb3e2c94bc7a7e6c5fb7a78d541fa013a23e7fdabfedb44ec9e755937ff6cae45edcef9abcaffdaa7bc84bc54f
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q9AcQSCBznqNLPI7zjbCgX3ifyM2JRbBDZsx:EufspTf2g2Jc9UqC73blXSFudsx
  • TLSH
    T1A5233B0037E8C12BF2BE4F7899F26145467AF6633603E9492CC451DB5613FC69A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2