Extracted

• • Target

    Image-1.exe

  • Size

    257KB

  • MD5

    aa7453ea631c154413df9974a3b17b90

  • SHA1

    ec7df5d298d392b3d1e7e7825e15ee112d587885

  • SHA256

    46a63396c3d340513f963181b0098f984e62861875151d25fea30013170c8f3e

  • SHA512

    fb1b9f3216d4574936c019b7351f8b9f5a63983df0ad231b210cb67d188b1824aeb3240471d7ed7842a47108aef681d185c026233d1687af7b48510fae8bfbb1

  • SSDEEP

    6144:mCn9gl994bCIMenvjnPrNoaIxT7K/P19yZD2kzMZOI:mCKl92CIDvjDNo1t7K/P19yZD2kzMZz

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2