Extracted

• • Target

    5950a146dc73c30a51f3a6c29b37cf93_JaffaCakes118

  • Size

    47KB

  • MD5

    5950a146dc73c30a51f3a6c29b37cf93

  • SHA1

    5293e3447822240bcf9a47092f448ab9689b05bb

  • SHA256

    9e7370614a11179b71851be277e8fd2fde8dfd7f348d830ed9d0a1954ab818f4

  • SHA512

    ed90aa5ecd6c54968306b2129dcfa434b3bc5b0341cd48cfcf617495453b92ae4a88da9b38bb0ee0d9cad1e934f0afa7bc6de5bef82b66eb0789e7d3cacf455e

  • SSDEEP

    768:+uyKFTMIGZ8btAWUumy6mo2q8JXDFDyfZpPItshen76X0bjY1y1l0VQcz5E4CPiB:+uyKFTMtkY2DGc6hen7Lb0ol0hz5x31H

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2