Extracted

• • Target

    2024.12.31止尾款结算对账核对表xlsx.exe

  • Size

    1.0MB

  • MD5

    33961801df7df4040fb2282d6103286c

  • SHA1

    1c0b29fa3a333974788a71c896e30f38e2bf3769

  • SHA256

    782d0356109cd4bdbf0c69932dd6f753754a426927c26f7db60bff7344c46c1a

  • SHA512

    0d7a73ff1312de597fc71d3d5d0dda34e326ad2268a762695487547361a734568f21f1d0856dd9a502b704a9d5caa7ebc547baa329dc0f906ec003ca23dbd44a

  • SSDEEP

    24576:CMjhKbkkc7tiPbWJF9WUqMFWsRvtciqgQRgOD39wKX:RI4kOtiTQWU4SciuRgC9T

  Score

  10^/10

  discoveryasyncratdefaultexecutionrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Command and Scripting Interpreter: PowerShell

    Run Powershell to execute payload.

    execution
  behavioral1behavioral2