Extracted

• • Target
    4b53e8e7a2390c3ec16c745705611397297db66ef65c9bea55697556ff39ecde
  • Size 45KB
  • SHA256 4b53e8e7a2390c3ec16c745705611397297db66ef65c9bea55697556ff39ecde
  • MD5 2bc1688875cdd6983a74fc0797840c8a
  • SHA1 b2553804d2b62ba2fa939f0d2303ad3162410e48
  • SHA512 506cb8ff08c990b49dc614482b5fac7988f0bea8fe26d2363f757e8318457166f72c8834b8615b648ab04f36181325bfa8e286474c44b2ed8ce7d2e94d14c7d1
  • SSDEEP 768:UuKWgSJTwU6NkWUGnaSmo2qA/+GtCVnJtHuPI+zjb0gX3iTCGq1IBDZcx:UuKWgSJTwRf2P+TB3+3bbXSU1udcx
  • TLSH
    T1F8232B003BE8812BF2BE4F7498F26145867AF6637603D5492CC452DB5723FC68A526FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2