Extracted

• • Target

    acbb983043b2caf0a96657216843a985a11622ce7480c3e508c7c86f5bbf5f3c.exe

  • Size

    3.6MB

  • MD5

    6e8ba787b170e324a5b096c27afd69a3

  • SHA1

    9220ffdfba5cc4c8efda49ab03fd9e3dfa5104aa

  • SHA256

    acbb983043b2caf0a96657216843a985a11622ce7480c3e508c7c86f5bbf5f3c

  • SHA512

    99e80b34ad7eeb06121b14458d57aa9efcb245edd60e5f1d96134938ad929bf9a7de0911c4561451698a4d4fc07ac66e42635f5c41ea0afb61d357f0310d8f7c

  • SSDEEP

    49152:iWGtLBcXqqR6SVb8kq4pgquLMMji4NYxtJpkxhGjI4TbG333geTIZw2r6TUV:OtLu0qgwh4NYxtJpkxhGQ333geTCFv

  Score

  10^/10

  asyncratfuegooodiscoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2