Extracted

• • Target

    '

  • Size

    927KB

  • MD5

    1acefd52b10b834de4e770df29a8e8b9

  • SHA1

    adace06de40d3a81e92e5e5368d0a6854d785115

  • SHA256

    acaa5403a8c73414495693520d7e94c423abc4ae4237eddad8cb0886e6b23724

  • SHA512

    f8206d24e3f370caefe81cea4212581afe33af8867f2647754b5a67b5f69dc472bb4c892d6b048b72685844b8b4865b1f118ceffebb4571146547997d3f9731a

  • SSDEEP

    12288:ltgnPhEgPMI+c45linVLYeXP54o3Mn53XBVF+2O/6yCbfLVZIfTbowek5+n5A7y7:EP6gPvh45liV0ey6MnFXk2O/wfIrbGKe

  Score

  1^/10
  behavioral1

• • Target

    Mia_Malkova_Photos.vbs

  • Size

    4.0MB

  • MD5

    83959ea07eae4d7f08fb11862ed707cb

  • SHA1

    80f40a35bde7a1500476bb17401948f4f811c7b0

  • SHA256

    20f8f27cdfbd0a0346a2e43348b3ae626d3aa4712ab559dce8286b74a58ddeb8

  • SHA512

    16faa156267bd072d9c889c951a109c827cc61d01b5962a74c912a8a63d5582802a6d1cb78875294ee3cb1fe361cfc41545837c22a4f76765f74e9b609942d05

  • SSDEEP

    12288:X999t9t9t9t9t99999999999t99t99999999tttt9tt9t9t99t99tt9t9t9ttttE:EGg

  Score

  10^/10

  asyncratgbdiscoverypersistenceprivilege_escalationrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Drops startup file

  • Event Triggered Execution: Component Object Model Hijacking

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral2