Overview

overview

10

Static

static

10

JaffaCakes...4d.exe

windows7-x64

10

JaffaCakes...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

  • Size

    1.1MB

  • MD5

    dafad1d426889ba283eac46ba73cced2

  • SHA1

    16f2652749c23f426ac0bc85907ec3816c56cf56

  • SHA256

    cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d

  • SHA512

    363a0c8d1afb8591cd3f2b6ce0409afd5fa588150f1f0d2532886e19df4d83e47de76724e04b312378fdb64805240a998f61f706e5a89939df84573d1b582399

  • SSDEEP

    24576:pr1LQJJtK3D0E5Xyi/NMdCRnqcyl6ieU9AiteAb3VNqSAeCfGJs9271UyQ2/q:NlQxgyi/CoRn5+gU9Au7rAeCfGJs9270

Score
10/10
ratdata2asyncrat

Malware Config

Extracted

Family

asyncrat

Version

ANC8.0

Botnet

DATA2

C2

154.211.6.212:8848

Mutex

DefaultT

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_cbbced5ccc483f9acfd0f96acf8944798dec06b6541ede54d01877df6e47c44d
    .exe windows:4 windows x86 arch:x86

    32c5de998b5f069b26c94c8143b13c06


    Headers

    Imports

    Sections