Extracted

• • Target
    3be622613aee78d1e07dccaa6c6d7239412a5e7d5cc6e8ad76967297fc23dd43
  • Size 45KB
  • SHA256 3be622613aee78d1e07dccaa6c6d7239412a5e7d5cc6e8ad76967297fc23dd43
  • MD5 36d5ac3390a29e7b52c021dff02688c1
  • SHA1 bf00aa6e34b5190633dd0d368b27956c2de47b1c
  • SHA512 e3546bbb48c2eedf856389de8129044f6543d80abc362b0cb1350e34740f71858f5adc4ca38d351973c45019eecbbcbe0ee5229ec49b4ae3675ed016ebf2906f
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9TZo3TMtPImFjb0gX3iuMI3FblBFFvUBDZsx:EulCJTHl42sU3mNbbXSrIVblBFFqdsx
  • TLSH
    T196233B003BE8C12BE2BE4F789CF26145467AE6673603D58A1CC451DB5713FC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2