Extracted

• • Target

    f569525615c7585c5e54720d11bc1ab7_JaffaCakes118

  • Size

    414KB

  • MD5

    f569525615c7585c5e54720d11bc1ab7

  • SHA1

    c0f6869db5365d4be5c7f381f10175f18eb9b95c

  • SHA256

    e40dd437b2cad30c5fa480ce932710e4121630d9d48aba6c8527a3d6f006ea21

  • SHA512

    603cac841e9168d3ac7e4502d1f3f481e624854a6fe4265a53333b0adcafc1daaaee91e0694d6a82c2c061a108a8d71f371c7b1abd6ee1d9e76c437c96bcbed3

  • SSDEEP

    3072:0D32GhNvy+CFkUtzqJUtIFwl2BaxTXnY+nVugK0ia/Ch501GB2qwUxe0:U2GhN6bFkUtmloxBVvJK50kgqwU

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2