Extracted

• • Target

    8545fedaeb113fdb4000b3f6a8d0f0f4694f9198203086a7d1230385a5180f78.exe

  • Size

    790KB

  • MD5

    c8b4fb2984a495c19cc5d4dcc1922914

  • SHA1

    bbc25258b543805926d034564015a2e4d40b0647

  • SHA256

    8545fedaeb113fdb4000b3f6a8d0f0f4694f9198203086a7d1230385a5180f78

  • SHA512

    d084a9565d9cd7137969bc0cfb2dad3e2370451715dccf89906eafbb2ecbdf20bc8e654ff4aaa8facf5bd8931861f8e3df4cf5f1079431debadeff93b37c2205

  • SSDEEP

    12288:T6tHgfBPsucbAapcfyTAKQrj86Hil5QaHRnxiWUotpA5Xturz1J+mZWwVVVVVVVX:T6tHwxEAapcaXBxRwWFtpAzs1IWb/T

  Score

  10^/10

  asyncratzgrattorremenorpersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Detects file containing reversed ASEP Autorun registry keys

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2