Extracted

• • Target

    SecuriteInfo.com.W32.MSIL_Agent.EFE.gen.Eldorado.18059.1151.exe

  • Size

    159KB

  • MD5

    b9df92b97a2ed049b84b14d95265c2dd

  • SHA1

    07b74eb3ea78f0cbd5e63384446f8c0ce9949acf

  • SHA256

    2ecbf5a27adc238af0b125b985ae2a8b1bc14526faea3c9e40e6c3437245d830

  • SHA512

    51b451c3144964604dbdd68016bbb05529083d1cadd0d37997dadf4c1180b2727d9f7c03ce1da281c5e1623535c946d77c723e36dda06592c66a8aecfe21b2fe

  • SSDEEP

    3072:N7RE3pQSCkpdSgT4YCySS3t4gWA/VdsSeZnaPeSaN9s/4W:N7RxkHSxYfSS9pWA/V2/nr9s/4

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat

  • Async RAT payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2