Extracted

• • Target

    509e3c1c45131f98ebb8e44eda547598327983e1f18af4fcfaf0bad4abbcf819_NeikiAnalytics.exe

  • Size

    25KB

  • MD5

    c9b4ba2e22a8a9ead69c4d02508e3b20

  • SHA1

    23225d107830fc12c293d2ceb6915136aad5c571

  • SHA256

    509e3c1c45131f98ebb8e44eda547598327983e1f18af4fcfaf0bad4abbcf819

  • SHA512

    2a173e4d95fb20ffd6a4a865f7eb7ff79ae8cc53ecff25bb68f642a4b75a03b908a9b49299a11b7f117e1ad95a25d6fc370ef72d29b91f8f28ce0c550871d978

  • SSDEEP

    384:iGHHnySKDQbkoKDVbJdpGKDGPGAEWmmqAWsKfHRN7dYTJXlGs4mQfWfp:ip39EPGfq+dWE5RWB

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2