Extracted

• • Target
    bb4da770883603781d9e5a1601492a8830cf4ccd7d0b95846b92d21e2707251c
  • Size 45KB
  • SHA256 bb4da770883603781d9e5a1601492a8830cf4ccd7d0b95846b92d21e2707251c
  • MD5 384b9b36e7d2bd1d3d60c2f0fac51273
  • SHA1 f695912a459c65cd9ed5ae5f622956ddcb85b4d6
  • SHA512 40749af3bccb36d035bd8f77fea99088788d3daced6141948e5a224fd3ff502bff0ebcc829c0ebc11cda5dcafa86a7010bcb3d9ca487bba4e0c49de85b5043f5
  • SSDEEP 768:EulCJTHESwgWUK3aGmo2q9x/rLzlJAOPIc6zjb1gXCiYvGffrG8wElwCwBDZsx:EulCJTHl42ePp23c63bSXrY+frG87lww
  • TLSH
    T19E232B0037E8C22BF2BE5F78A9F26145467AE6633603D58E1CC441DB5613FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2