Extracted

• • Target
    ce57b20dc4baf9b0d8be7f24b2a5fc098abed5ee328bccfd085a2e32393466de
  • Size 45KB
  • SHA256 ce57b20dc4baf9b0d8be7f24b2a5fc098abed5ee328bccfd085a2e32393466de
  • MD5 7b4ed7b8353d7b059878cd44264f3030
  • SHA1 a7c33e74f58177cf819e25afcbbb761016095937
  • SHA512 975dd60f45a4ed545e08c801055920863fcdaaa4439ed7a690cb74815348e0e07e2db806b8aec3e8c533b653cf2aaef540cf09cedab11443680cf90ffb89af41
  • SSDEEP 768:8uuSpTg7GBoWUSH6+mo2qY7COtTMtPI5zjbXgX3iyMpXvc3x3oJBDZ0x:8uuSpTgyf2DRv53bwXSNXvc3ud0x
  • TLSH
    T170231A0037E8812BF2BE5F78A9F261454A7AF1773A03D5492CC442DB5623FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2