Extracted

• • Target
    51be6e41b05b5bd7801818ef9c1cd1bcdb277530ff1da981b91afe99e81093b2
  • Size 45KB
  • SHA256 51be6e41b05b5bd7801818ef9c1cd1bcdb277530ff1da981b91afe99e81093b2
  • MD5 e4dfa4b467cc4aada7ec4ebc2ed14e6b
  • SHA1 83aaf58f01559fb55e12795ae0f0dfb46fb60318
  • SHA512 f599bebde597640cac09d5598cd65be0b9a6844fffacae136d8bed31b149d23a9641f3ab42e62fe8aaeb9aa549e805c6d6bbb677043b413188d0724ed3118dfc
  • SSDEEP 768:cu6RaepTPYzbs8WU+Xaamo2q1swZQBKkPIgzjb7gX3i30Jvs9vBDZUx:cu6YepTPso20bg3bEXSEhsvdUx
  • TLSH
    T19A233B003BE8812BF2BE4FB869F26145867AF6632603D54D2CC451D71A23FC69A426FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultcommand_and_controldefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Executes dropped EXE

  • Outbound SSH connection to public host

    SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

    command_and_control
  behavioral1behavioral2