Extracted

Extracted

• • Target

    42ffde5af3d66024c0699f14922bb1da_JaffaCakes118

  • Size

    315KB

  • MD5

    42ffde5af3d66024c0699f14922bb1da

  • SHA1

    b4019d8834f565877ead605a6930e5fdb1bdcfa1

  • SHA256

    9b608fcfcff20713072deb68b58dd218cc10f880b5c85a7903aec99d9471f269

  • SHA512

    cef54ced9dd019f24cd8619e3fd989a8ca146680ffb9b98217941068d79c26a38476d696d2a6c91c69fde70e3b8f25f05c18462682b26486f693c16badcd82fe

  • SSDEEP

    6144:D6xqzHOWLMGBgPcpdrVVsqy3WmSNRbNqfWvC:OxqzHOM/HVVs/3WNbMfWvC

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2