Extracted

• • Target

    Fivem External.exe

  • Size

    47KB

  • MD5

    e2fa7258b14f737cdbf2ccf9fb6c3738

  • SHA1

    75cd07af307152c7f3c77fe9a1e42cf7111713ac

  • SHA256

    003cfee0803a0d0a89be54be1c52397a7b436796ff405e5b9905e2c1ad075139

  • SHA512

    c7da8918bfe7e8034cc34f8608ff44e73d1aee2d0a30b01af3c2eaa0b2acb947a576edd9eba36ad0ec830d6cd297c72e1b6d37a574947c9ba5111eede592a5ee

  • SSDEEP

    768:j61TILIe8E+0YixSvHXYLuiWi8YbDgyzn7OvEgK/JXZVc6KN:j6rWRxqmzbc1nkJXZVclN

  Score

  10^/10

  asyncratdefaultratspywarestealer

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1