Extracted

• • Target
    080b5a887a95d6ed59427866ec5dcba781eaa74dbf626de8717b36e5ca95a3c5
  • Size 45KB
  • SHA256 080b5a887a95d6ed59427866ec5dcba781eaa74dbf626de8717b36e5ca95a3c5
  • MD5 14ae4beede1dad00f21efeb232193561
  • SHA1 6d060e60d6c4b97a7460d0d1d796bda886d8f9e2
  • SHA512 52d4803b7b3c55b02bbae260e40b52d5fec38bb6603724fb8c5dce135aa557dc09ccf8df3cbdf9727cee3c2e4e81f4eb4319e59991fb7e0c5e2ea8df9b499147
  • SSDEEP 768:cuq04JTLcsP8EWUmOTymo2qAg0e3+Kv18iZPIezjb9g03iFcNs0n80HX4MFBDZUx:cuqNJTLr62C3T6iWe3bq0Sl0n8KTLdUx
  • TLSH
    T1F8232B003BE8812BF6BE4F7899F26145867AF6632603D5491CC451DB5B13FC6CA426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2