Extracted

• • Target

    JaffaCakes118_778fc62a8c897f275e44e36f494e2299

  • Size

    617KB

  • MD5

    778fc62a8c897f275e44e36f494e2299

  • SHA1

    0e01030f9c8b468663d256179bd9a3a44a6d1445

  • SHA256

    4451ec4774f723d28040c521ff532961684eda243782e5706f7bf1a9ca7afb1a

  • SHA512

    e41a4e681c53949d6deb1f1f13201a4af39232a6c4eb8ca61b6017838604c9643f59f6363354e1a597678acd8b35bd99dcb69264f5a248d76a6895f14ecc0e1b

  • SSDEEP

    6144:dC4w8juap56y9dg4sIo9ZCf6YRZDYnDSb+Ox72aR914w6Fs2gVKiEgNaratgMb:Ynapvg4sz9dYRZsDy+M70sdpEmar3Mb

  Score

  10^/10

  asyncrat1discoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2