Extracted

• • Target

    5b8f4ac518b63ad22760cccdce780111_JaffaCakes118

  • Size

    45KB

  • MD5

    5b8f4ac518b63ad22760cccdce780111

  • SHA1

    9dbbaa605d00f2810047d03553468d68cae09627

  • SHA256

    32e9232c14e3ddbe71f437caaca8f3ea699b81a7479590527d7ed8969b5a4a1a

  • SHA512

    9d66eb70b9fe49318492d0fd01711c007a45aa6b73886738c51341e275dbc5bc356fd65b6c651a84807e96cceae0a16736588dee45cf02ec3c6760c0e0ebd8a4

  • SSDEEP

    768:C6tKW2VIifsg3ACjeG6KLDiFdBTebkhvd/rduYmjOfxQ1Gg+xMLMx:C610j6TrqbwvRr5SOZKGbxMLMx

  Score

  10^/10

  asyncratminecraftsborkadiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2