Extracted

• • Target
    80dbf1ee1b124fb5860eb49084be97ff608448c4375df23df757b429ffe92ddb
  • Size 45KB
  • SHA256 80dbf1ee1b124fb5860eb49084be97ff608448c4375df23df757b429ffe92ddb
  • MD5 c1555deb0599f760587ea3f4e263b986
  • SHA1 e169339aea505b400c8880067ed3276425d9dd7c
  • SHA512 3e2679e232cf62379ea5f7119530c9664c582b320ef0a46d407544299c005e97493aaae6304d91b9f0040b043b932fcaf4b11084851707eeaf0060f822576d91
  • SSDEEP 768:0uPrpT/LGKeWUszuAmo2q9/Q7PivEPI3fjbUgX3i0smyDRRNG5Nsy7n1BDZ8x:0uPrpT/qY2Zbk3rb7XS05d7bd8x
  • TLSH
    T131233B003BE8C12BF2BE5F7899F26145867AE6633A03D5491CC411DB5713BC68B52AFE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2