Extracted

Extracted

• • Target

    New folder.zip

  • Size

    1.2MB

  • MD5

    622d5994b151cf2d039d32b5cdd83227

  • SHA1

    312e0a45ffdbcf32e26f2699d3d3f7fdefbc020f

  • SHA256

    8d7e0046922716f97deef518f2d9f05e7a7dc8c3b6065b8d01ed1844c05d1999

  • SHA512

    5659576c8303688e320fbe4e3e4c5813a3cae7421fa6ffadc02743c22f24f0ad9c5aae65366fa5e980fa8cc099038054a4d391381deac4b41123cd9db36fe43a

  • SSDEEP

    24576:KR5iks6CqE+i952S3R9JIIy6JknCd6n7MZlTfc+kVKbxTKQDFC:7D6JE552S3lJk86n7ATfc9VKbvC

  Score

  10^/10

  asyncratdarkcometdefaulttestpersistencerattrojanupx

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Modifies WinLogon for persistence

    persistence

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1