Extracted

• • Target

    Erup-Grabber.bat

  • Size

    11.9MB

  • MD5

    aa1f6cd31fbb77165aedc2da94b32cd7

  • SHA1

    8ca88341aad256ca91988306ff47e6cf12cd94d8

  • SHA256

    09518a42f1b21665f2f2c3e48e093b1edee8f4bc1293e8a0d3242d0fe04e1eec

  • SHA512

    673401bcf121675eac29ca49d5ac73c93f2f8c84fd332b5b9012ed48c1eff2a8e7042a29e12cff28f8b4aa5cfef9c3b886bb9716632fb172d44743b2b5a2c0c9

  • SSDEEP

    49152:0sGrYDrssg95lKH7yfptPzON+AswxtLeDk4hs2GHfFb2X4cd0tdgxQtaQrWHjQx1:5

  Score

  10^/10

  asyncratquasarv3.0.0 | seroxenratspywaretrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  behavioral1behavioral2behavioral3behavioral4