Extracted

• • Target

    VISUALIZAR FACTURA ELECTRONICA GENERADA; 900436401; SOCIEDAD DE COMERCIALIZACION INTERNACIONAL NATTUAL SAS; FEV; 1289;DOCUMENTO EMITIDIO.exe

  • Size

    956KB

  • MD5

    81111fe6e4e37b4ef5507cd47a3262cb

  • SHA1

    5c2036ac6fc6e1ae89492eb9bb05efef7ca7c6c5

  • SHA256

    6d01f5803ae40a48497dbee43b4fe80818b48df22950208244590091f8cc9eb2

  • SHA512

    58914df9dca6ff14d1654d99a40c3d77fdd9b8366245e749e1eb8b4e7f9dc65c9587788314b9634ef14dc13782ae9571a98a0cbc46b14d09ef2aa4aaef169b7e

  • SSDEEP

    24576:0E57VUKfFNo3ePQiHSmx+hYPnBcpbz4/:0U7mKfFNoAymxcYPBcpn4

  Score

  10^/10

  discoveryasyncratlatentbotrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Latentbot family

    latentbot

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2