Extracted

• • Target
    b2db089245abfb21adef59dedb2c73e42e56b1a6d9273b32b427d9d23a5ba517
  • Size 45KB
  • SHA256 b2db089245abfb21adef59dedb2c73e42e56b1a6d9273b32b427d9d23a5ba517
  • MD5 4a7ebc1996442735f2fb234b00a2d29c
  • SHA1 c8b795069b8658c5227829d0846de44113c8a9ff
  • SHA512 8473cc788d4eecbc264b5835af8b530ad7fc45f5994c9487a2bce905d38ec97985c837cff77a781f25727815d0a2c25c09b173d7e1a359e74f2248aa65aced39
  • SSDEEP 768:ku40ZTX3uXTaWUgzW0mo2qwnZTohEaSPIrzjbcgX3iNQfd3ESyDkq08BDZMx:ku40ZTXEb2d4Ea7r3bzXSa13ZlSdMx
  • TLSH
    T175232A003BE8812BF2BE4F789DF26145867AF5633603D5492CC451DB5613FC69A42AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2