Extracted

• • Target

    36851699890e8d2ed92224eaa6d8661b

  • Size

    3.1MB

  • MD5

    36851699890e8d2ed92224eaa6d8661b

  • SHA1

    5998d5f3aa5953dae2898054b76da6b5a4c12442

  • SHA256

    592dea4eea3a4fc6540a4c677253f3936822f9040add569257eb1878cbafecca

  • SHA512

    09d4d80a104278c173400b9ac6daf4377f934e193ee8a69136761349504615f70f76ca79642ff45cc8a1ca7847575e68fd676f0569b5162b096d96cc74d8da0b

  • SSDEEP

    98304:9p31ZVRYXDG9EGbkXJ8RaScZSYZYDPZjxoZ4MQk4d:9pjgipF/GZYs5Qk8

  Score

  10^/10

  asyncrathawkeyeser1keyloggerratspywarestealertrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • HawkEye

    HawkEye is a malware kit that has seen continuous development since at least 2013.

    keyloggertrojanstealerspywarehawkeye

  • Async RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2