Extracted

• • Target

    4b5cc1e99d28651fbb693422c5d392c5d47dfa61c8ec4995197706de5cb3442a.exe

  • Size

    941KB

  • MD5

    3a43f4d6c1ce25bc8efe548fa2b16bc7

  • SHA1

    e0b8080d2c241ee9c8d7d31adb6ecc0fc43d0a0e

  • SHA256

    4b5cc1e99d28651fbb693422c5d392c5d47dfa61c8ec4995197706de5cb3442a

  • SHA512

    3613b2af89545273fb21c09889e02e477d86ac2e3f313fec2a28fb68c9e94b39b3160b26d7637dce1e5053808ffe14cb0aad9dd0c404bbd6d4c8d7ea897e8072

  • SSDEEP

    24576:uu6J33O0c+JY5UZ+XC0kGso6FauSnJzxWY:gu0c++OCvkGs9FauSaY

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2