Extracted

• • Target

    NOTIFICACION ELECTRONICA J AGRADECEMOS PRONTA CONFIRMACION DE RECIBIDO NUMERO DE RADICADO 0201494303 432943/00004Notificacion Electronica.exe

  • Size

    1.9MB

  • MD5

    16d2607288fb726450f200b7c935862e

  • SHA1

    99ab6d9f3f8080965108bcf13d98dd215edc66be

  • SHA256

    e758ad080b4fb8b693c2e60648871b2e01a5a3438a1e78707135ee921ed78b0a

  • SHA512

    15e5cff16dbff19ada258d690db796616b3dfe6757cab626e79efe187521a5688f58cfb4aecb652960c6de71446b867872dd3498b9c4372063980275bc7618fb

  • SSDEEP

    49152:l3SirYhIitmZrbQhrHqxZrbQhrHqIpV9m0t4c:l3mtmZrbQhrHqxZrbQhrHqm

  Score

  10^/10

  asyncrat*** ave fenix ***discoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2