Extracted

• • Target

    a52d0c834a09cc7efdfe374ee2f4f90e_JaffaCakes118

  • Size

    380KB

  • MD5

    a52d0c834a09cc7efdfe374ee2f4f90e

  • SHA1

    5957da57c40aef542a52d07df04501f74b631bdb

  • SHA256

    aaf00e1348307208d3415f629193cdf125171170a32a8cdeb140e8373d079714

  • SHA512

    e99e1429dcac7398473cecb4a63cce2ac1b0bccb2f4dd284e38c1ca16dac21d0d6552c886604c87fe79590274ea821734faf874639f873883a75e0d4d5a247e8

  • SSDEEP

    6144:hBUl1fcf0Tv2sbP6mSPmFFLmlrqQroarJ0zUWZyzhX:Q79vnz6mSQYxkarJaZyzh

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2