Extracted

• • Target

    JaffaCakes118_e8ba9a4744b38798138c8360fa0c892169f128658ae80e9cf229e34c2a683a71

  • Size

    72KB

  • MD5

    36d24132150e820598e182d2f51b35b6

  • SHA1

    a1773014c2f0ac1dafc87f3e8d6cd2f697417eae

  • SHA256

    e8ba9a4744b38798138c8360fa0c892169f128658ae80e9cf229e34c2a683a71

  • SHA512

    f6da08a584e74bdc2f9f7ea611fc49cfacc8bea3e301c86b53d8c0354028e245b6d9f0149a98207023fcbb9b5561f177e6835e16dfbb2f3d6a343569c0440350

  • SSDEEP

    768:YoBLMxx0Fs4G7WHNw13wRCn1OCDyjb5gr3ir/u2lj4/aJClZl2tYcFmVc6Ka:YoBLMxmcAUVebWrSrGsgPrlKmVcla

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2