Extracted

• • Target
    19a6ace5976ab67aa3126f8de6ebbe6e55984899a203dd19133b743236b26f1a
  • Size 45KB
  • SHA256 19a6ace5976ab67aa3126f8de6ebbe6e55984899a203dd19133b743236b26f1a
  • MD5 a0f9ae551daf78007bb807dfc0194994
  • SHA1 8e9079bd1a38a7c03aa7b87be3a2b0241ef3bc68
  • SHA512 93aa9923445761a11ef66011db5d8c30d3faa5ab9148c3c02a01f13088bdd9fe82c02b3623ccddbc793f679cbd0e4a86dcf5eb847b15cca91ad3bfdf19f2d8df
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1swZQBKkPIJzjbsgX3iMJ6/m3JLPDsrBDZUx:cu6YepTPso20bJ3bjXSC6/mlDs9dUx
  • TLSH
    T176231A003BD8813BF2BE4FB898F26145867AF6637603D6492CC451D75B23FC69A426F9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2