Extracted

• • Target
    f61f4736b8839e648e7d057b5bc92d7eb4322bb8de71a05109e27a7cb24700c7
  • Size 45KB
  • SHA256 f61f4736b8839e648e7d057b5bc92d7eb4322bb8de71a05109e27a7cb24700c7
  • MD5 e1147f918c04c3ee8de2e7391b0c3ea4
  • SHA1 6f85d51074719ea8646ba366b879973dfbdf9f3b
  • SHA512 b8b373ce54e017a1c3795f4a1a005c79300ab9a1afc36a39572acb9bffb691dd422a74c2f2ab7ea1ffcf23b8c04f8a83a7cb13160bf0ea4508309a06b556f32d
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qABw0QjKXPIazjbsgX3iDT49rdFG3z6nBi6YBDZcx:UuKWgSJTwRf25sa3bjXSD5D6nBi6edcx
  • TLSH
    T157232B003BE9C12AF2BE4FB85CF26145857AF6633603D54D6CC451DB5A23FC696026FA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2