Extracted

• • Target
    5191582efc5bd261d90d0894ad02c44b0e3834e640de2b370872e619f8fe20a7
  • Size 45KB
  • SHA256 5191582efc5bd261d90d0894ad02c44b0e3834e640de2b370872e619f8fe20a7
  • MD5 db658928a2145f74d920a26e35a709a6
  • SHA1 281095e596de929fb7e5868fdcb03174054e53b3
  • SHA512 6e0d0cd77c08fb67d87c661cf73fe89ebc6cca276afcf56af1ecd769c6d745ef08924a23cfbd0f4d7c4ce8bb576dcba4408963682a9ec54fcdf410c36c186b38
  • SSDEEP 768:EufspTfzcR6uWUcb+wmo2q98zjHynaKPIs1jbqgX3iH5nPZVsjOBDZsx:EufspTf2g23nZsdb9XSZPZ+Adsx
  • TLSH
    T13F232A0037E9C12BF2BE4F78ADF26145867AF6632A03D54A1CC411DB5723BC69A426F9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2