Extracted

• • Target

    b0f2b902c66d71756f785eb099001989.exe

  • Size

    84KB

  • MD5

    b0f2b902c66d71756f785eb099001989

  • SHA1

    163511b438a862ee53b63bba267efdf4dbc5ed75

  • SHA256

    a9b516990db5fb757d5745cbca218fb6996562af0454dc3820403890d77abcb6

  • SHA512

    830885519568bfafb1ab4be092786cc805f4c8f130543045a85d9ee778746896a059dfb556d22ec4fcf9fd8915ac4bad43b7f1fcb9fffbd4ad3e30061a3fbed6

  • SSDEEP

    1536:x6d1aPk8kVCrKuHUYFLCb95bFAPiDkjCClbo0rITGdxFjMvK3YpeGm:x6naPk8k0KuHUYFO5bFvAjCUnOuxFjZ3

  Score

  10^/10

  asyncratzgratdefaultratspywarestealer

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Contains code to disable Windows Defender

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2