Extracted

• • Target

    4f35ac873a97230c69a50bc06fd750a9_JaffaCakes118

  • Size

    36KB

  • MD5

    4f35ac873a97230c69a50bc06fd750a9

  • SHA1

    ade1e45a59fe0343cb7be26de680c80f7bab3519

  • SHA256

    7f92427f427dcc9c8746f252d895e938107e94d6432028d7d4beae5523b56c8e

  • SHA512

    64452c18ba544ad7c15d5cc9165c4886299cc64b72efa9f236b198c8f786ac9f1cfff53f5125896ad4d2dcd5039506f8406b4364fc693afddd547e1b80c5788f

  • SSDEEP

    768:+yUXi87RgWVj4c0dGHl0QHyZLa2fed3dddddddw:+yUXi8tnj4rdI0QHIsd3dddddddw

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2