Extracted

• • Target

    JaffaCakes118_2639445988d9173a2f4e1f95d3ab6062

  • Size

    609KB

  • MD5

    2639445988d9173a2f4e1f95d3ab6062

  • SHA1

    5469590c4a341104f6bab13f1b7b484d43b1d34d

  • SHA256

    f95c8ace1331a172303a2f2cea8edc805203156e499012df465a158246495cce

  • SHA512

    88b8d43d8d263ea9700a855606354eae0a496c9ff2f3e96398d607f0d81345b19a19bef0b1728d1828671ebe3563df891cdc62912b2fa9086615947a9f9bf5e1

  • SSDEEP

    12288:sULh08OGQuZLvqJFTP2bvCuJsGx48vpnnuQsHhJfAUyfvq3:GnGQYTqaCCsGx48vJuQq

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2