Extracted

• • Target

    d8ccf0d00dbf712744ba342e641ad6faf8d917254e7fd44cef4e0e4cb3ac99c7

  • Size

    2.1MB

  • MD5

    6d87f123772612929da682d8097938be

  • SHA1

    563fa72a6b4b2084db8a54f3fc9076b9b744e8cb

  • SHA256

    d8ccf0d00dbf712744ba342e641ad6faf8d917254e7fd44cef4e0e4cb3ac99c7

  • SHA512

    cd09c640eb2598b2a31c2aa9cbdf79920256a1d7e4fd7d5771fc4a837fd74a284532b14da397a380b8f363ed00130b5af40224242609a49c15c4955ac97925fe

  • SSDEEP

    24576:ve3yAGxmrk7ugY2yDWAzBOFaeLWxtUPom69bX83RJV6VPzKZUvW32r0enf3ELps8:ve9Q7ugcrvtUXCbXwcT1QMUdLlbU5M9

  Score

  10^/10

  asyncratpersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Modifies WinLogon for persistence

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2