Extracted

• • Target
    486e03a7e247b269bbae2e9acc7de6d43acb017611539172139cc00ac2aa9d71.exe
  • Size 45KB
  • SHA256 486e03a7e247b269bbae2e9acc7de6d43acb017611539172139cc00ac2aa9d71
  • MD5 fe1787644235ef3db0ae1ca5a3db448c
  • SHA1 94d102809b4eccb6bd63732ab54b5183f54f18f4
  • SHA512 8b04b39f8b6d5e55bd53f91968e19b53d57d4d6e34c5cb46180e5c39db6188cade018f6fb4fdc0da2ab9e6245bb274e4b0888217d1659b9112d06051ad20c48b
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAm8kLyuObvtkjZPICzjb+gX5iPvZfbgepZhP3RBDZMx:kuSOpTPOP2W8LuyyjWC3bBXIPlgenp/8
  • TLSH
    T1CE233C003BE9C12BF2BE4F7899F26145867AE6733603D5491CC051CB5623FC69A52AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2