Extracted

• • Target
    8f2ce30c03345642e87e670bbd3261472bbf7a2cd570b7b28cbad8bb1b001088
  • Size 45KB
  • SHA256 8f2ce30c03345642e87e670bbd3261472bbf7a2cd570b7b28cbad8bb1b001088
  • MD5 2013503a7994129538d48970308d5dc5
  • SHA1 8ce3f456b014a772f46d2827cd993df9d22c08a9
  • SHA512 54749ceec7bd792a354a20186b2c1fc0d3b2ebd19680f1bd45423d3a929fa73a71204459f145ee04fe8537db8bebf8249e36f26c83a86a60f91817cf4d4f49f9
  • SSDEEP 768:kuSOpTPTCFcWUeXa6mo2qAG8V1RpPEcPIMzjbRgX3iaj7y5Mj3BDZMx:kuSOpTPOP2W8VDZEhM3beXSajFdMx
  • TLSH
    T18C232A003BE9823BF2BE5F7899F26145867AF2633603D54A1CC451DB5613FC68A826ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2