Extracted

• • Target

    PROCESO FRAUDE FISCAL/1 PROCESO FRAUDE FISCAL.exe

  • Size

    12.0MB

  • MD5

    a7118dffeac3772076f1a39a364d608d

  • SHA1

    6b984d9446f23579e154ec47437b9cf820fd6b67

  • SHA256

    f1973746ac0a703b23526f68c639436f0b26b0bc71c4f5adf36dc5f6e8a7f4d0

  • SHA512

    f547c13b78acda9ca0523f0f8cd966c906f70a23a266ac86156dc7e17e6349e5f506366787e7a7823e2b07b0d614c9bd08e34ca5cc4f48799b0fe36ac836e890

  • SSDEEP

    98304:ReAtQzKADvk/9TEaImN9/tiHBIn8c3hCEFRUTaZnPZOtXwH:ReAOWOM/FE1mNHiFc3hr7UTaZnhOtXwH

  Score

  10^/10

  asyncratplatadiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    PROCESO FRAUDE FISCAL/tak_deco_lib.dll

  • Size

    315KB

  • MD5

    ed00ffeccc0f63387993338d31c753b0

  • SHA1

    c7f55119ab5d4477f0ca2156bb70c048f810449c

  • SHA256

    0c85a67ceca005ec019df765769aefc7644311d0b791070463fdf6fe2b13c94c

  • SHA512

    baeb2233c79fb663a7a5bda12b6a90d2416d651876118021c842be69a6a9d42fbc3e12f2e6616d50e1b807d3eb9d2a02529e63126044b287e42cdcc74a893f24

  • SSDEEP

    3072:t0brJmz6/K6UwambkfOhOmesG+4ny2lV0C84:G5mz6/s2IfmRHAyQVJ

  Score

  1^/10
  behavioral3behavioral4