Extracted

• • Target
    0ea2cc3ccb9fc62df9678dc47f1740ca37876f63c15674f37ede58c766417b32
  • Size 45KB
  • SHA256 0ea2cc3ccb9fc62df9678dc47f1740ca37876f63c15674f37ede58c766417b32
  • MD5 9d99a4de42a5d72eabbe052b41d11f7e
  • SHA1 8a061c47933229df5981085c16be3c610413bf36
  • SHA512 a8379ba709dcc3a5521d953d09320126d011ae011dea00ae8012df2140e128da0bd29bb5f0dbba4ee2127354b7277e49f7485f6077f21a4bd7d4e3f9ca80f7d3
  • SSDEEP 768:8uuSpTg7GBoWUSH6+mo2qY6iaLMwJAOPIcAzjbogX3i7KbtgfNyizBDZ0x:8uuSpTgyf2i5n23cA3b/XS744yId0x
  • TLSH
    T1F8232B003BE8C23BF2BE4F7898F26145867AF5673603D58A1CC4519B5613FC69A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2