Extracted

• • Target
    Apollo otp.exe
  • Size 267KB
  • SHA256 44a89ab2537812629ee70cbc27862150f6be73a037ecfdd0f713b91445690e57
  • MD5 7a3c5fb54426d6e09262dc7884eb2004
  • SHA1 09e4ed45c5c1a749c58b119d26e9e4ad83e20dc1
  • SHA512 7be4e8897deba64de6e17f4c663c1d32c2b7a6c32d94041bb4dcd74cd326242f42b69690eafa884dc35ab15b39dd02384777f5353ab8074be3f39aa61da6dd92
  • SSDEEP 6144:XfL+oqaFpKss32sFSnTAGC7jmFlpSVxyH7lFzaB7MKMO:XfLfpKss3csj+a/ULewDO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Drops startup file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1
• • Target
    ⠨/cvtres.exe
  • Size 6KB
  • SHA256 ab96c975acd27ce758174646c6d22554f3d40f1e04596fd6483cab7fbe83e1a9
  • MD5 335735e85b1406e2e43a766a0305da0e
  • SHA1 d2d3703b0394db59e58e4071e602f56402bb17eb
  • SHA512 484d5610d18e56c0615cb1a6941309903341f870e5e5b95604c36f00383b40283094403c3e63bee1cbf10d6d5dfcc0d9c02f3a14879c455a3f9498cb5673eac0
  • SSDEEP 96:vEW2q2IwhEJzVFKA5lCwIpwn+gGFQzyOoq9TkzNt:MW8hKBUA54MNGfOo+O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral2
• • Target
    ⠨/temp.bat
  • Size 242KB
  • SHA256 d5f5ffdb04adb138c29ef5cf7a7cce58a7a830481036c321ff3d1537bebf78dc
  • MD5 9bbe96004bffd7a4e63c16c5e035349a
  • SHA1 7e0bfa435417c144d4b21dd0c148174fc6b60764
  • SHA512 601433db6c78538bf49201a204a055b3016eb4a5df11d2f0a9efac1a9ad7545b103acbd0d8ff130e8a16231ceb152dd6050cbd9a12ee9ddc6cf06f73832c401e
  • SSDEEP 6144:vd56+Vjt56dsJiiB9+Fid9p67FrR9RiKxCLQZFjcCz:vHfj36ETpwl7xUwxz
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3
• • Target
    ⠨/temp.ps1
  • Size 1KB
  • SHA256 27f2822ca2be992ebb6e1000aa3a2c39e9b4ff7e257cb45eadda8776d65018a7
  • MD5 5e817bbd9ef2f8821aa0283b20a51923
  • SHA1 102ca518d89653fb400636e660fa3fc276235c5c
  • SHA512 f21388e0655e6733abc70ff9fe2bbfdca00d81d2e7a09236d679293df34a966990f689f2d62119cdd877c7aeda35ab0c2b3c66108bc6b721e5dea34a93342d2e
  • MD5 SHA1 SHA512

  Score

  1^/10
  behavioral4
• • Target
    Run.bat
  • Size 247KB
  • SHA256 d6054c9c7b230b50547d4011b35aeda76b1c8dfff4db250f37ecd271a69a553f
  • MD5 c7637cdea02f137186120d3f05b0c97e
  • SHA1 379b0798ac90ce3b58a0b85660194fc33a5d8dc5
  • SHA512 8ebaba0f3055c2394c41ba75d578758fed0ece226d56a033e0fffd8014eee995351812982c23b6239e53d7dc742467ace380c4229c5f6b3c76bbaaa498665078
  • SSDEEP 6144:zn8UUt4f+6Z11SExnYcGtetPqDHp2QPRFKX:zn4Ry1SXtetCDASRFKX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral5