Extracted

• • Target

    52f2c8892f84d4af8acfd4c171c3e862_JaffaCakes118

  • Size

    285KB

  • MD5

    52f2c8892f84d4af8acfd4c171c3e862

  • SHA1

    e12d8fa867705204dceb4bc0a18b724aa8c03d19

  • SHA256

    9f7b003e61866ce2d53e7855e7682d1304408afc77ef78de9f50ce1a9d52d5a6

  • SHA512

    2061447b2cea62cfdb469a44d5cb0867abe73a27b43ea2b7f93b2842c1c5a75f2c140ce24048351ddfb97973b9ad9d959d0923f87236d6c30228289db0fffad3

  • SSDEEP

    6144:Jbnf927KNYDcN9QSzzM9rzGzmXHK5RsURdMREHzmm4z6S/O41S3:dVQD09QB9vnXq5RplOOS/FS

  Score

  10^/10

  asyncratratdefault

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2