Extracted

• • Target
    faac61fdd44c73f5cea068dc7577aa73e735f5c8276f736879aeee825c43796b
  • Size 45KB
  • SHA256 faac61fdd44c73f5cea068dc7577aa73e735f5c8276f736879aeee825c43796b
  • MD5 6b660e34e7999a299f21eccb60fdfebd
  • SHA1 ce0e956e13b078852f45faa8be5b594cfc274738
  • SHA512 dafcbe2d8b58d9f3a3777cfc33e708eb5362c7416a198363e9bbf7174f734214e5aee6b6206f5f9782a172a9a7d69c4a5c0ddd2160bfa53ee5ec697da30fb11a
  • SSDEEP 768:cuR0JTPUYkEWUmjWymo2q1U0ewtDcy0oiZPIuzjbWgX3iYbUwIVnR/At+woVjlcd:cuR0JTPjY23wRPiWu3bJXSshIVOYljl+
  • TLSH
    T1B3233A0037E8812BF2BE4F78A9F25245867AF5636603D54A1CC451DB5723FC68A43AEE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2