Extracted

• • Target

    1d26170ba16131f0321cf65e19a0ce4acfc7d5dc7cb8b020431019eaf5f888e8

  • Size

    1.4MB

  • MD5

    be1727f95815127020ee54942d5fda49

  • SHA1

    9aa064ee91e8e195feffcf94002c89cb20f93a7a

  • SHA256

    1d26170ba16131f0321cf65e19a0ce4acfc7d5dc7cb8b020431019eaf5f888e8

  • SHA512

    a317376e19e970ad85b43774602094294c9cdd325c65b2a964c1648629625c77009a24378ad45de8063c07af8c8373347c7fea763bf8ccb89c500411dee3b639

  • SSDEEP

    24576:2bcgonHEwRinwG/8Z5wLaMkQeGjfOWW5/xyGCq/jEczJmsXHdnUO429eP7:HRiwG/2RMkQeGjWWMYI/IczJlUOrK

  Score

  10^/10

  discoveryasyncratzzdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2