Extracted

• • Target
    547584c7fb2fc8cc696416eadb3d1af452e62f6d7dcbb7ac51613abb9dbc0e1f
  • Size 45KB
  • SHA256 547584c7fb2fc8cc696416eadb3d1af452e62f6d7dcbb7ac51613abb9dbc0e1f
  • MD5 6c83a3b6a25f8b33f2e830c76c19f208
  • SHA1 80b122d712877d6b7ff89952b0f8c36c0a935873
  • SHA512 0585dac9031d8f4c824c98c2f1d13dc0746249f5dbe57fe6939b115fa2dffa524197c92a5ac9e9e47178e57edcfbb6ee7e3342550c02a6b51ea16708ba493ec1
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFJlp440lMOPI0azjbPgAiorebAJk3KJc5JBDZUx:cu7e5TH2A2Q0nM30a3b49utG3KJcNdUx
  • TLSH
    T1372319003BE8812BF2BE4BB899F26145867AF5737603D54A1CC451DB4723FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2