Extracted

• • Target

    import.ps1

  • Size

    7.7MB

  • MD5

    aeeb7afa26cff3fff16e54c677056b73

  • SHA1

    28b0befdbfa2a3fc66b328756c7c6ac636336ec2

  • SHA256

    112f2f582654691ec17bd5dade694cca5d2447c53c9d6b3a668611907ceb1d52

  • SHA512

    8d51343705aa0bf078159acf5161356a7ea25fc5b134f86220de46728a4bb089c1667267480dbc314a121cb0180007cd6e9c451966f28d381347fffa74ae762d

  • SSDEEP

    24576:cfn0m/OPb9o/Ha4KZZQLFq487s/0H+VXQ5qDrtj6Bnoi4LD2/Qy4IyQr+KJn04vE:w

  Score

  10^/10

  evasiontrojanasyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat

  • UAC bypass

    evasiontrojan

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2