Extracted

• • Target

    test.zip

  • Size

    928KB

  • MD5

    e003f20b316a5eb35416f12d0531ae0e

  • SHA1

    40c74eb990a2441dc4bf576bd690dbe6c022dc5a

  • SHA256

    1406d358c5ebb28780323b6451363d1f0f6ab5738f3924a6434622991f6fb2f0

  • SHA512

    3becac05a784cf8aad1a5294005a88ffe7e9c0fbe4a87438b94611e8160700ebadf30a85bbc383d56a5e1710c775c1eb2ccfd43a6ed521e71393f8523564774a

  • SSDEEP

    24576:yfI7FbTmxwx4KJukcG7BYOCsi4JuITyaoES:nxbTHsk57BYCnItES

  Score

  10^/10

  asyncratzhitler2discoveryexecutionrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2