Extracted

Extracted

• • Target

    68f66a98a0455e5795c576e39ac1d4c3

  • Size

    824KB

  • MD5

    68f66a98a0455e5795c576e39ac1d4c3

  • SHA1

    0ebb63db3e53efe202d280426d899625760474a1

  • SHA256

    e7c7270706fd08006d6a5c4dcf5ba4f127373c33a856f5d40563ddd4627ac803

  • SHA512

    2da88a9e5ce9e40b775fe90e181b80ac1e8d29e1894fd96619fb31a6cccf5d65cb7e8a815b6475243f074291c109542d0a86f1af07632b1b47b0091d41886f35

  • SSDEEP

    12288:xM8wyXeZv9NzhRo9HjHJiSQ90oRWybuMj4RJT3QG+mRHpqApXiW6PVaICPCSP7oy:K838W7Z/rX0l/

  Score

  10^/10

  asyncratazorultzgratnoipinfostealerrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2