Extracted

• • Target
    a8c1b4838703e36de8071b78b8d6b803a2e44c71577cc1c988d29fff0cdaf734
  • Size 45KB
  • SHA256 a8c1b4838703e36de8071b78b8d6b803a2e44c71577cc1c988d29fff0cdaf734
  • MD5 27df1d674afa63999fe1719aca68dc62
  • SHA1 2688d9fad2d00862b6d1167adb097847f6babed4
  • SHA512 52548995da67719415a2023f20d9c92f2717591e3a990a3a2ad808d49340f5333b156b094f97cf8c5eeeaa1737a8407d5ae64dace5868c77d9d3d99af5a00652
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q98ZoQTMtPI4djbagX3ihk9nDNBmI12bBDZsx:EulCJTHl42tL341bNXShk1DNBmdsx
  • TLSH
    T1E8231B0037E8812BF27E4F78ACF26145867AF6673603D58A1CC451DB5723BC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2