Extracted

• • Target
    a83519d4957ca09c9748a5b78b952a34657b1af6f19707ad918d5f5adda9774d
  • Size 45KB
  • SHA256 a83519d4957ca09c9748a5b78b952a34657b1af6f19707ad918d5f5adda9774d
  • MD5 df6bc942ae70d4c7c659818f61fca3a4
  • SHA1 7878f8016a8c83207e12d459fa3b5679145d068a
  • SHA512 24c2a0115590e1e804240aa071ef187984b37e126cdded9ce7e22194429818f8d2065797e5eb379d1f553b06d761fd30bd97b121a1cf647062c7136f2da0a2f9
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFCm/9GgrOPIRzjbmgX3iivzGq6pMIBDZUx:cu7e5TH2A2pm1b3R3b5XSivQpMudUx
  • TLSH
    T1E6232B003BE8C227F2BE4F7898F26145867AF6677603D54E1CC451DB4613BC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2