Extracted

• • Target

    SecuriteInfo.com.Win64.Malware-gen.6815.27736.exe

  • Size

    21.0MB

  • MD5

    61a9118bcc03f7f44a6737ac3460d5a3

  • SHA1

    b8505dba60bbc9db5a2f186394ca7aa729b0a130

  • SHA256

    b729cb7c7d368f60162b4ad181b3e124e22c846923afc40fe021cf2e85d0a8dd

  • SHA512

    edfb14423ffbfd7bbbb1ac51095daba7d02ebcb9364396308ab9b006a872daa2962ba28d08c7985651174940c0336a1b7dcd8edf55b9ee039c88988c96a3656c

  • SSDEEP

    196608:1r4hfG1SXQxqlxR5PxcGpH5vsVaN6sEzfntkE7UO8MWBT4Ti9:544MX1lf5+2H8aNmTntkE9xmv9

  Score

  10^/10

  asyncratrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2