Extracted

• • Target
    77826072678ff3a44d3cf5d44d90933686b15a6e6680527b9023f503869b7747
  • Size 45KB
  • SHA256 77826072678ff3a44d3cf5d44d90933686b15a6e6680527b9023f503869b7747
  • MD5 121eab2ed4a80c3362f4d9ea8498f9b2
  • SHA1 2ab2cfce859b96d826d72df1ca210c5b083d9372
  • SHA512 340388c52e5d881d8985c2f5fdd0f864bf8bd029e09c74795dec842fb6f5445e8cc01a43e4ccb3d81e1f9aa159fc779f04d928ea7e4b47319a2b653940c333f4
  • SSDEEP 768:suJdpTP3tcsWUODmqmo2qVhxJaxMwHuPIvzjbegX3i+Y4RPxLskTyrFzy0BDZkx:suJdpTPdI2IeN3v3bhXSZ0PxokTyrFNk
  • TLSH
    T15E233B003BE8812BF2BE4F7899F26145467AF6633603DA492CC451DB5623FC6DA436ED
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultcommand_and_controldefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Executes dropped EXE

  • Outbound SSH connection to public host

    SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

    command_and_control
  behavioral1