Extracted

• • Target

    8e4c1131bd1370075b9c2da4071812f1_JaffaCakes118

  • Size

    48KB

  • MD5

    8e4c1131bd1370075b9c2da4071812f1

  • SHA1

    93849841a91e558e39de71f02381069f27526432

  • SHA256

    c3880f8b017f3b83d5073ac7886cd76878986c64f86fe91f9bfde39a44ee96b2

  • SHA512

    02891e4a00802a8ce47de2b44a44ecbbf5116fb3e7df17f04c8b3499fc8b07e5e554afa3091ddc337ec3652badc29fa9d65355af5a76ee22b66e3692f5a699fb

  • SSDEEP

    768:Qu62dT9slTJWUhCuzmo2qLWaU+I6PI8EP4Owm0bohwAP0bgvz27Qp+oFI2BBDZ+q:Qu62dT9W52KWDP4OwbohwAQ+z292/d+q

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2