Extracted

• • Target

    Adjunto Radicado Nº 2958474820230413.TAR

  • Size

    2KB

  • MD5

    f1f90b16c380dcb8cdfe11867ba15928

  • SHA1

    afd61955b022058917883489c769a0c49667f472

  • SHA256

    9465ccad9b77e9e73481a6b25c38f3bbecc89d996a5f7cb4082bd28bc845a505

  • SHA512

    3fae45de8844422e1eb29c9c5424e5ff41e57445da9b3170e4dd6bb0ee9eae61bc31fb34e45a597b7e84006594a58bb9e98643a1ade8176179db1a3d0dd61404

  Score

  10^/10

  asyncratfebrary 22rat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2