Extracted

• • Target

    lossless scaling/Lossless Scaling.exe

  • Size

    155KB

  • MD5

    1bb432c7d79983c0438f9c05d7ab2a42

  • SHA1

    fd9d24d6417273c04a046e4da2bd51f6ac287939

  • SHA256

    69c131d4901fb0f0192a2a97fb48012df696c5bd08a38c34e1553a3bdb9942ac

  • SHA512

    1ab2802727c66834e349f79b51847c79c9f340e3b716add2b4ec8c25d3bd1096c3f82596d2efbe57e922945f965aafe72b1bae30d6fcedfd7799595a5ca190ce

  • SSDEEP

    3072:AcjJ6p7RATueBb6sKGyLY1hhhhhhhhhhhhhhhhhhhhhhhOCD:AcjJ6pWTuet1V1hhhhhhhhhhhhhhhhh/

  Score

  10^/10

  discoveryevasionexecutiontrojanasyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • UAC bypass

    evasiontrojan

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2