Extracted

• • Target

    $RECYCLE.BIN/$I47GN2Y.lnk

  • Size

    80B

  • MD5

    c4c83a7cde1a36fad94aa77c0e15d06d

  • SHA1

    bfb66c1e8c39d3858d9821e228a95aa573121b5b

  • SHA256

    ef8b3abf0db8c785d8beee2a64fb3e0add5e85ba0161f85ace8c07a9cece5978

  • SHA512

    edab1b107e20132515c90a386f57d55fec2e54529520e6686292a6359828eb1893b647bc13d25988747449f10b89c8eacb226e66dda95912d93b964f4869d747

  Score

  3^/10
  behavioral1behavioral2

• • Target

    $RECYCLE.BIN/$I6AKHCZ.url

  • Size

    92B

  • MD5

    d9f53e37a6a7d47fc086d8a37a74e801

  • SHA1

    d651093a093789c29b04a8c17fdb9ab4443dbedd

  • SHA256

    dd9e36990c4d19966f744f3e23399b62189ffb6d76ecc1981d65942af483fb51

  • SHA512

    c902da67505b9ca4cd02cceda1571ce77f3f95eb94148dbc7894db97921e39b6eac57a91a48ea61bea2f90039f1cf3a5f5633472bfdc8fda75e437aa17c0cfb9

  Score

  1^/10
  behavioral3behavioral4

• • Target

    $RECYCLE.BIN/$I9BVFJO.url

  • Size

    84B

  • MD5

    106364071e4178bb725e479c5ae733fe

  • SHA1

    1f1ab2ebe4289d271b548e73307d51dd7aac3e06

  • SHA256

    421d1cba483e5beef4205ffa43ce32dd1559d4d46fc65ea05d665a1fca8b42ff

  • SHA512

    f767a13eb19e92de917cdaaaa01627b4ccafb69a8b49e6ea6e4ca0a073e5c385962b82744b327961b3a4a4a7dd0b4f13aac9de44dd1c41934b37a7b8a22d49fa

  Score

  1^/10
  behavioral5behavioral6

• • Target

    $RECYCLE.BIN/$IAEXCG6.lnk

  • Size

    80B

  • MD5

    6c10870c38d8541ac9fe32cf2df303ea

  • SHA1

    919449d2399a83e54284e32ca0cd30efe617627b

  • SHA256

    20c1afbfe809c840bd81cd150f455ad6ee300a1ecbd0fc3797c656d0f13d17fe

  • SHA512

    b11bdb44d2799454d8a65d8878e60a5a8fbcf81385b529b8f08abf0cec30aa8bb005a00d966f0e8dee66596d2a6b789631cd7edf63fd5cb2f046a09e9ba795a5

  Score

  3^/10
  behavioral7behavioral8

• • Target

    $RECYCLE.BIN/$IAH62O0.cmd

  • Size

    88B

  • MD5

    6ce36942b92ab77bb04a661e7055c3f4

  • SHA1

    be1b67a345be03d35f2ce10a5a652242e02d010f

  • SHA256

    52441db6b2f466dcfca7b1a580234bc783f66bc660d0d38079e00682b8100dfe

  • SHA512

    1968daca3e6b1f3377da11d3bf1d5423f1beaa0297d22bd9df68f8944d3aa3ddca43659031337a8015e184790e5fdaa792408f485f5a33802af043c5b948ae43

  Score

  1^/10
  behavioral10behavioral9

• • Target

    $RECYCLE.BIN/$R47GN2Y.lnk

  • Size

    944B

  • MD5

    c500f65d596f13de0b45916fd38b2ebf

  • SHA1

    be7cdc0ad17e22c6d9dbe5c4943d9474d697b1f0

  • SHA256

    b175198523ec0ee22013b9c066fedbe7db317e776c31757e6dc3a0254004211e

  • SHA512

    ffc64f5925312e9075bb384c6e1f850cb9e5821e027d82bb1902da01583e760615fb6786b61ac9e49e3a789a9341a01c8b6d8ecff3b57a32ccb8c724e450748b

  Score

  3^/10
  behavioral11behavioral12

• • Target

    $RECYCLE.BIN/$R6AKHCZ.url

  • Size

    141B

  • MD5

    0de440fa9e6012b525dbddeea04f5fbd

  • SHA1

    e8a74bf4989eee88a071057b3ed402b7662df498

  • SHA256

    5bb39c8f533ef487b406d3195a274bba69e538a4d3b49b7f80e8fa6b4804c0e6

  • SHA512

    c416da23e60c9183d6193fcc8137196f02d3db0a662c7a5802630177cd7cfc7afc3d052778b576f12d2a68620ddf922d72810a11a24bab6c8c6e06c0cd697715

  Score

  1^/10
  behavioral13behavioral14

• • Target

    $RECYCLE.BIN/$R9BVFJO.url

  • Size

    192B

  • MD5

    30b15d0074689b2b57391607ce87184d

  • SHA1

    a8bb35e64db7774eecd9bc9c684677215cbd22ff

  • SHA256

    be7c237538f353211d999453405525df568567de5674dc1ffda5773a7cb0be8b

  • SHA512

    9aa9dd3bfefc57297390763715ddc2882797a37dcdfa619ba41cced889f864f88bba18c130e6fc2d15293abc8e884ef8cbfba48371205b62a87ca583357db465

  Score

  1^/10
  behavioral15behavioral16

• • Target

    $RECYCLE.BIN/$RAEXCG6.lnk

  • Size

    764B

  • MD5

    50ca4a3117112b2921ca0dd1d2669b3f

  • SHA1

    523f7011bd9bd86930c055ddf92441d441bf9043

  • SHA256

    2f0ff66fb95769969f2036a205033f6868da8ebd1a211c45a8afc3f805940a69

  • SHA512

    33db76a36c9a27c1344e7d39fa55fb9be4a047785d10ac48f272d15fc9b30f67a2994117bd4b2f33662ad0f3b747aee85ef9a41f4242744ca974a8e066e59143

  Score

  3^/10
  behavioral17behavioral18

• • Target

    $RECYCLE.BIN/$RAH62O0.cmd

  • Size

    111KB

  • MD5

    2c3351c659a42a82e3a3d865c88eaaaf

  • SHA1

    7c73b2c98e449be1c5a85806c08cfe05c0a699ab

  • SHA256

    f8f8f56ff4b52a36a6619ca8eadab3df1ae333dfda870a36b024bd74cf0ce9e4

  • SHA512

    b1962ca896f6328289a61522c6ede86bd0e6436d3dd6ca2170888ee2592a9cf88640f801dd864dbab1713ddb930b4dbed3cba0c5362f56f19150fcdabab599c6

  • SSDEEP

    3072:hXiSJ9Nvg6aGNGIR9Lb5ZQ6gvr+sBKWTP8ydL:hnXy2wg9f5ZezrKWTPdV

  Score

  10^/10

  asyncratvenom clientsrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Blocklisted process makes network request

  behavioral19behavioral20

• • Target

    INVOICE#BUSAPOMKDS03.lnk

  • Size

    1KB

  • MD5

    a2102b6bfb32fa339adaa869026518a7

  • SHA1

    43e75344d3946d7ea60ae243a5c28146931cac6c

  • SHA256

    e86017b846165690bcaf38242e09df96651aec60e9c2dae4bf50de8ace77f029

  • SHA512

    823409b1d9b8a4ffbf1375f5d9f90ccdee57622e1b0830cce40e25b13ff8b5a00cd7ca74ef741283b849d1a9fecf7ea06cb2e2e800e5ec8d627fb5c3c9999b9b

  Score

  7^/10

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral21behavioral22

• • Target

    zay/dial.lnk

  • Size

    1KB

  • MD5

    5b83c1fdd1febf3b68aa9a27486a31dc

  • SHA1

    06376481bcfbac7435e503e430c971064253d73c

  • SHA256

    71388b3505194a6a338b4a5ec1d2054ebdffa2c96f23174740577c0f5be19d4b

  • SHA512

    7888d314bf385d6f679f9b33af9dda9a34e16beb512288b312ad34f2c0403091f819d9a55c511737f977f3b93cc616a89a78cf3825244972a6f550218e22f622

  Score

  7^/10

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral23behavioral24