Extracted

• • Target

    JaffaCakes118_fc1189eca6c99ec90d71c2317c7c89b5c5d54dd5d378a57e50669849775f25e8

  • Size

    45KB

  • MD5

    9c851b642e1e49781e2ce9eedb02ee64

  • SHA1

    e22971a8700bf28867e744244474033d55143ee5

  • SHA256

    fc1189eca6c99ec90d71c2317c7c89b5c5d54dd5d378a57e50669849775f25e8

  • SHA512

    77696aaae1df81d5922ddf30a6df4fc8f1e3aacdb2884d1a55e8362315f6895c13394fc14723f2879a8848cf33ec235a5405841aed9450f15f515a251da6ebda

  • SSDEEP

    768:buqg9T944nD5WUxiVDmo2qrjKjGKG6PIyzjbFgX3iSe8lUSoR29OAlpxyNmBDZrx:buqg9T9xy2uKYDy3bCXS+G38cApxhdrx

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2