Extracted

• • Target
    6a3ef4d6341c74b3f7c6ccea5c35c0054b0ea28f41dad1cdb0103d66dfef21c2
  • Size 45KB
  • SHA256 6a3ef4d6341c74b3f7c6ccea5c35c0054b0ea28f41dad1cdb0103d66dfef21c2
  • MD5 d6db78ca054044cdbf6f0847910cabf7
  • SHA1 bac264dd714433a723047ef11c4b47a528f3540d
  • SHA512 a941b44925e322e92421cc181b59c2b935166f39e1ec4bcfca299ee9640e7c9806cb767be4a37b88d1aef2ac4c0a2c62452cb2018ffb5b6e27947f10abf3cc77
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1IBz3QKx7PIUSjbNgX3iX26+1jUGD9gHBDZUx:cu6YepTPso2NV0U+baXS6ghdUx
  • TLSH
    T1B8232B003BE8812BF2BE5FB4A8F26145867AF5732603D94D2CC452D75623FC6DA426F9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2