Extracted

• • Target

    SecuriteInfo.com.Trojan.DownLoader45.6497.27763.6707.exe

  • Size

    608KB

  • MD5

    414dc5eb0c47614a9992cb197e7c2629

  • SHA1

    e96011f7fe6748042874825c48b6bcab41398374

  • SHA256

    4c47c69491166259b45ba5ef562a4dd0ad0547e01d0e5111fdbede33c478d798

  • SHA512

    5b85f28d258d8d195081d62e99aa05f9a5c02ce1af5e8061e1e63c6cbc863251b85719ac931550a8e80d0e00b03e6ddfb4d5200fc0abffea652ac31ab2a162a6

  • SSDEEP

    6144:Atn9LnHdKXSHl6YYCT67sVoxhED4jRVp0CNeG3TNLCRLF:onR9N6aIsVAEEjCCwALu

  Score

  10^/10

  asyncratpersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Modifies WinLogon for persistence

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2