Extracted

• • Target

    Loader.bat

  • Size

    919KB

  • MD5

    0563db3c877e66a892a597fdcf52ab47

  • SHA1

    6d29695797709cf741081ec8d60e57230c0bf612

  • SHA256

    0af4119b3a1eded45cb97a0ef9b022505470d0987cedd5bf1af0ac8c8efb322e

  • SHA512

    a3e3227d410543602cc3245a061304257fa3be6ea256776bb934a226f4e2cf2fd148de257766e546e5b6a99b98a98526e12dc15acd963c997e37e52a7feaf96e

  • SSDEEP

    24576:RKgJjCEe4LWZywOUpRWwjxyLscvANgDP7bB:sgle4QWsyYSl

  Score

  10^/10

  executionasyncratdefaultdiscoveryevasionrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2