Extracted

• • Target
    a5a58f1078b55ba43e75d79b586247b068351a05a9f29de578fd612e259c95e2
  • Size 45KB
  • SHA256 a5a58f1078b55ba43e75d79b586247b068351a05a9f29de578fd612e259c95e2
  • MD5 135aeb36c73dd78e5495e971796676b5
  • SHA1 776f8773b9897e659ba19c0148645e6bbb010654
  • SHA512 16630b28d56f6063abee9e3cba49943ae1c7410d9c092a57d8f1d97666f9568ca357c5256154e5fb621598d29bcb06b9a5936b5d64e5b8cdf9ab5ef6a76eac53
  • SSDEEP 768:ku40ZTX3uXTaWUgzW0mo2qwg3xY6aZOOPIgzjbAgH3i4XwS7Uc+BDZMx:ku40ZTXEb2cu/O3g3bnHSWpBQdMx
  • TLSH
    T1D12309003BE8822BF2BE4F7859F261454A7AF5673603D58A1CC452DB5713FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2