Extracted

• • Target
    dba217e20eb8a7eac72b42f11f8623ed0625a41ec2f9933b8f86a0b981930eaf
  • Size 45KB
  • SHA256 dba217e20eb8a7eac72b42f11f8623ed0625a41ec2f9933b8f86a0b981930eaf
  • MD5 3d275d9369123ba06c7af6101a7d6c4f
  • SHA1 bc0795e220f26740dc8bc2a3c6a946513e11cae2
  • SHA512 6a68b17119244311eb6bb2fc497a287c88de62923bea6d4a4959033279969e54722ba165b9443bfefeab58e202588a109531d21bb94370951252be049b079fca
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qADVbQpaUGcPIZzjbSgX3iiOzfrSOcHuCluDWBDZMx:kuSOpTPOP2zVEcUGhZ3bVXyrzfr7TOQb
  • TLSH
    T153233C0037E8C22BF2BE4F78ACF26146867AF6636603D5491CC4519B5723FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2