Extracted

• • Target

    INQUIRYs#37567JAN2024NEWORDERMATERIALSPRODs.e.exe

  • Size

    542KB

  • MD5

    0b97309812b9b2941e5512e12095960e

  • SHA1

    8fc625372ccea9b23c3c3585e1a86a06479eb630

  • SHA256

    1714faef50d0127645ce3540480623cf619f9b10c0364c67ca22db0f604e2381

  • SHA512

    8f0568c9cea86cd33c089ec6f9f32581563d03edbc5ab9a82fd83b81c57ecd4556248a58d40dd315732187a213218a5a4e0af458aec0bde4a6b647b906dfa65b

  • SSDEEP

    12288:eP7R2iNPBJI3AZp/UurrtqinZfTLatVX2wGlY:MV1xuAPH3A6natVX2wG

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2