Extracted

• • Target

    JaffaCakes118_8febef9e39284335678e45955722d6a6

  • Size

    617KB

  • MD5

    8febef9e39284335678e45955722d6a6

  • SHA1

    0f5de2557c7cef0c486157089cf2b761ca8839d7

  • SHA256

    7fcb98579512e3df028c8199b530d8e027d55a871d2afb81aeb5994adac814bf

  • SHA512

    e8b70e73b960b4fa3fa209baaf702990dc4a153cca85eca5a9586ab42dab82d99d6ecec15c9ed043cca2637710f2921f94b2a2b934c9960fe36514cdf4ceacbf

  • SSDEEP

    6144:dC4w8juap56y9dg4sIo9ZCf6YRZDYnDSb+Ox72aR914w6Fs2gVKiEgNaratgMZ:Ynapvg4sz9dYRZsDy+M70sdpEmar3MZ

  Score

  10^/10

  asyncrat1discoverypersistencerat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2