Extracted

• • Target
    2717d79d0511995d9fec2b49ca07ab8d2806bf74d1d9f252e3259461a31a272a
  • Size 45KB
  • SHA256 2717d79d0511995d9fec2b49ca07ab8d2806bf74d1d9f252e3259461a31a272a
  • MD5 201c991a22cdcb5d0ba393df1dd97553
  • SHA1 8adce64a025f6351af90dd0b5b0ab6d0d709c897
  • SHA512 a6e42d671f8737145d7c705ac1e4c98fb5701044010e036126d97daec0a08f5a290f10cf6b68d4cb63e64c4dfa8acda79ad924ef18c63f3a05a83973d9c56e5e
  • SSDEEP 768:wuZ8pT1Uu4/cWUeT66mo2q1I0ewUkA1MiZPI7zjbcgF3iO/qmyxUCBDZMx:wuZ8pT1tc2/wvDiW73bzFSTbU8dMx
  • TLSH
    T154232A003BE9812BF2BE4F78A8F26141867AF2637603D5491CC451DB5623BC69A43AFD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultcommand_and_controldefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Outbound SSH connection to public host

    SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

    command_and_control
  behavioral1behavioral2