Extracted

• • Target

    a750d5f19524e4431550930c4e8a0a95_JaffaCakes118

  • Size

    47KB

  • MD5

    a750d5f19524e4431550930c4e8a0a95

  • SHA1

    4e20317001a8da032d85e12ee9a41fa570485daf

  • SHA256

    aa8308e986d53702e8674ec11140bf6244deafd679135bb5c1b6dbe20475a125

  • SHA512

    a1bd14d2575423cce68d224dc00e359841521443eb0dff8516f442cbb38221105b7de1816b995469d554f5574a1188d50df210593e6f4128ca5d04e64c0d369f

  • SSDEEP

    768:iuyKFTMIGZ8btAWUumy6mo2q88CAPSy3PIE4q12T8sBTVe0bNlpmZJqtOlD2KsfE:iuyKFTMtkY2w6E4q12TZRRbDewMlDLsc

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2