Extracted

• • Target
    f4dd9eec5ac6aec0d0809ff61cc1b6d3bc24a11ce43806f46954c10332e06aba
  • Size 45KB
  • SHA256 f4dd9eec5ac6aec0d0809ff61cc1b6d3bc24a11ce43806f46954c10332e06aba
  • MD5 b16f8a24cc7f1500fd5c52d5fcde92cb
  • SHA1 fbd74e9a55d5c09966f178c26983b82e58c045ec
  • SHA512 b0affe8a98966430783fe4457da29b6f1ddfd31d9d7780e8a87e2c5582d226c6c87cc2ad3548ef0d0033f3fcd94e70ed930539a2171a78454a3cc310a9b51468
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9tCfwTMjPIqCjbXgX3igEg7CF5sKJ1qidfnnbBDZsx:EulCJTHl42a91qObwXSgEg1KrqsfnNdu
  • TLSH
    T199231B0037E8C12BF2BE4F78ADF26145867AF6633602D58D1CC451DB5623BC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2