Extracted

• • Target
    3279aea8dc47df9dbe4419d4c020796811f41d1c2dee53d10e4b87e6717be8e7
  • Size 45KB
  • SHA256 3279aea8dc47df9dbe4419d4c020796811f41d1c2dee53d10e4b87e6717be8e7
  • MD5 1b8769af28351169c4de87ea72d1e62f
  • SHA1 20ceecc9f70681f930c6ab4e532ae122907f6d0e
  • SHA512 de66a2b3a703bbd8a5da4457b0b0a02198858272efe487142fdd6da62fef12b551725139d8fb12e665d517406cecda94e3146d398dcd61ebad5510963b40de2d
  • SSDEEP 768:cu7m/5THrq+CWUoDuMmo2qFTlsHoPEaMPIGwjbNgX3iDVwNIz8X2Yq6W05BUBDZW:cu7e5TH2A2muuEaxG4baXSDie42Yq10x
  • TLSH
    T1F1232B003BE8822BF2BE5F789DF26145867AF6A32603D54D2C84119B5713FC6DA426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  adwaredefaultdefense_evasiondiscoveryexecutionasyncratpersistenceransomwareratspyware

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1