Extracted

• • Target

    Hackus.exe

  • Size

    3.0MB

  • MD5

    9c663208365a83ec2b477cccb6467b48

  • SHA1

    e7b1ade7745edb3728819e91e63cbc8150bef850

  • SHA256

    28d86a07879646a56eb6540184ba97968909b23bcfd85e902ae868521c311e81

  • SHA512

    a61c99646df0b701d1674534e7258e4714f7930f6220f93bdb15ea0c8351b8ea288c033cf388932d18986a0a5005c694933a94abb4f591b76a90867600302379

  • SSDEEP

    24576:Fl66l+Tg33ypYcJ52Ymx35h0s5zQ+6fe05bdgBJrGrdqDwEHK2oJ8BoZecPKeNlb:FLlP3G5KT6W0/KJQdqsF5JcJ+l2VbbU

  Score

  10^/10

  asyncratstormkittydefaultdiscoveryratstealerspyware

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • StormKitty

    StormKitty is an open source info stealer written in C#.

    stealerstormkitty

  • StormKitty payload

  • Stormkitty family

    stormkitty

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Drops desktop.ini file(s)

  behavioral1behavioral2