Extracted

• • Target

    6ab6671c9fbba06f36bf4f655d03f498_JaffaCakes118

  • Size

    438KB

  • MD5

    6ab6671c9fbba06f36bf4f655d03f498

  • SHA1

    02cb1d74714793c5ec3702ca3afbeb45ee7c0588

  • SHA256

    4d5b4eea780ab2393d06f02fc1a6b5f3c490ddd8d768271b7534b75072aaf023

  • SHA512

    275251629f1022d9cb330d4e91b614b871892e1a0cebaa533275dca0f3e6558316c039469bb5ce12f2807638bff23e7ef8c93933bd2a463d0f361922ed8f356d

  • SSDEEP

    3072:ySgW8stAeW4guBOvffu6Em5sK4gMs4oFT89lwYX7aVKiEgQ0evwqdV1cxCc8:ZgW8CGu6/yKLLFTKEVKiEg78jcxJ8

  Score

  10^/10

  asyncrat18discoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2