Extracted

• • Target
    abd285988463518c9f3685763bb7f9cd5f8430d5aae311dc03fd9ee53d6fbe5a
  • Size 45KB
  • SHA256 abd285988463518c9f3685763bb7f9cd5f8430d5aae311dc03fd9ee53d6fbe5a
  • MD5 aa0762eed8736384025072c5e2efeca1
  • SHA1 7349d720a670ad75f0b501407e539a8c1eb45fd5
  • SHA512 928c42daed5db51b1fac5df886db2a84e23ca6010fe0927dd0bd9311563791ebd97abf65fcd467cee41cf6176a65369e60baefab974faca0c2221472b721acda
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qAQBz3QKx7PIUJjbAgX3iwTI7j8mJeEwEdEABDZcx:UuKWgSJTwRf2gV0UpbnXS/Rdbdcx
  • TLSH
    T1F4231B003BD8C13AF2BE4F78ACF26145857AF6732603D6496CC451DB5623FC6CA426EA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2