Extracted

• • Target

    nezur.exe

  • Size

    47KB

  • MD5

    60ea224fad8adf65358117a39a4bd365

  • SHA1

    1eb47f8bc6d41ef26915e1f5292a830b4060dd67

  • SHA256

    a4d68abab530b30e8060ef2ded1bc57036ca53be7c3b5fbfdf62f65640ef82d9

  • SHA512

    2ea92e0abaa49537eca5d6f834275679e02c426d68c29298118f2202a11798209a013ab82caaca1670d6192886945137af31b96ed91e6b654f04849dba9c1800

  • SSDEEP

    768:IuGE1THwoPNWUtHT1MHmo2qz79WjIDfWEs7PIILiU0bMusLmNzg5DhcA5Avfc5nK:IuGE1THbF1m2MXfrILwbDsw05DhDa4nK

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1