Extracted

• • Target

    8d656451390b195b7c1fcb95af2fc525_JaffaCakes118

  • Size

    507KB

  • MD5

    8d656451390b195b7c1fcb95af2fc525

  • SHA1

    e4c36699cd0ad46f38c475c7d8a1374983a30917

  • SHA256

    fd2459ab88ff9a3215a3fa5d4a762617842bd7e4a5185b88b632caa7c52c7edd

  • SHA512

    b40b95a0ae9e92b075fa3291542574741e771f1114375d8d61d5a71534b93ac15774291ef9e2f10e31eee8cf595de320806440cfa848784c2c83f3444988369f

  • SSDEEP

    12288:d62RclE0A0O++rFUjB8HaC8pnsiRvVawcoRfOz:GpA0ORrFSBuN8pnsMs/olA

  Score

  10^/10

  asyncratbless my hands lorddiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2