Extracted

• • Target

    JaffaCakes118_777a952f66baa34bde02c6075430a407

  • Size

    50KB

  • MD5

    777a952f66baa34bde02c6075430a407

  • SHA1

    e737be56566ab4f09abcf8988220f0517834851d

  • SHA256

    6143e80d28f382ac57c41eeab350f8be0e88f642211ae1726538685eb0686aa9

  • SHA512

    b707be23a181518d4a318101e8b5dc04dba26949cc2e743e50f054eefffdc0585a9a8502719f732d1855a841735771d43717ff4611b36d6a27598235f3023402

  • SSDEEP

    768:f95geQCs3gOm6tiJSaZok3PRBX4fIOJaWm+YrEGMlc9OtwCvU062:fQe3sQMtBa+y5OsWm+Ygz20v

  Score

  10^/10

  asyncratdefaultdiscoveryexecutionrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Command and Scripting Interpreter: PowerShell

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2