Extracted

• • Target
    41e40817671c38ff3a0004ec08926381baded7ad661759e97dda14c4f778cffc
  • Size 45KB
  • SHA256 41e40817671c38ff3a0004ec08926381baded7ad661759e97dda14c4f778cffc
  • MD5 74eaf6c4fba0b70075f02be90f91ab95
  • SHA1 10743980a0e6fa87003af9f7d64b9ae277536848
  • SHA512 7b0f9c36ead3b1878b07f7f555811f53ee3a474a780568855ae07263b78b9aeb8fb8fe472d8e1ae5969be1828655e75514a8a4160a88e36aa24f7b98cd74cfb3
  • SSDEEP 768:MuBGJTP0BQ0UWUWHaimo2qVJpt0CCMhdjCvS8PIj3jbCgX3iPGIa5D4oJIibBDZG:MuBGJTPho2Q/CChBjTblXSPMD4oJIiNE
  • TLSH
    T1C8233B003BE9C12BF2BE4F746DF26145867AF6632603D54E1CC441DB5A23FC59A42AEE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2