Extracted

• • Target
    235df4742e5dd0ae7663ef7e75e833fd39f1f49eae1f33716c4816bdfd254886
  • Size 45KB
  • SHA256 235df4742e5dd0ae7663ef7e75e833fd39f1f49eae1f33716c4816bdfd254886
  • MD5 3b78a8d6d39d204933040e7715365489
  • SHA1 dc85c92ebe42221820747db5f7687aad3b53fa83
  • SHA512 19ef24d0924279487da23c9119ca8790cf9b84c4e7d6dbe57badec45582470c75edcd63de0989d11184e4e0f8b7263b2b7786f01f8222c5dab99ac33c1089116
  • SSDEEP 768:0u2vpTD4U2ieWUsqfAmo2qjMzjHy/aKPIbhjbCgX3igsaqnV4FzB1jin5T8BDZ8x:0u2vpTDe+2FnhbxblXSrKHItad8x
  • TLSH
    T116233B003BE9C12BF2BE5FB89DF22145467AF6632A03D6891CC411DB1713BC5DA526EE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2