Extracted

• • Target
    562a337e5ff0fdaed96202f2612856169301269c5021339a3df1a464d8b6ca97
  • Size 45KB
  • SHA256 562a337e5ff0fdaed96202f2612856169301269c5021339a3df1a464d8b6ca97
  • MD5 941d1aa5efa0edd8f1ea89a8ae3846b4
  • SHA1 1e2ad160a47b88bfa4f609ca8f397c4154f75ff5
  • SHA512 786875c659eca5ee9ee4d6b46d71a1b5e123c73506bf29345621503acd8bf274f957eb2251e38f089737ef90508f5922e6c2a6766758df8b80b8faa61f79e999
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9nDEbHBqj2OPI/pzjbdgX3i1950vPtBDZsx:EulCJTHl42IyoK3/p3bKXS195ePjdsx
  • TLSH
    T1982309003BE88237F2BE5F7899F26145867AB6633603D58D1CC4419B5623FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2