Extracted

• • Target

    JaffaCakes118_f44d9910d716f5d7fdf542e25ca41b20

  • Size

    491KB

  • MD5

    f44d9910d716f5d7fdf542e25ca41b20

  • SHA1

    f7dc32448961dd681c73594952ef881bbf36c7e0

  • SHA256

    dfe1f7602fc303b7a0f7427deca31f31aa44493ef8d129a631ce0ad770b9690b

  • SHA512

    4ede162be9f5a925513a2e9bf458cfe6db4ecb64906dc12008f2ab9fc93e92485e80fb4ed779e87ca4509abd5fdd4493e960fe25e7e0170eaea0e41c35a5af0b

  • SSDEEP

    12288:byrjnZPxkyx8gmoYSZtIEOZU8HocYnKrTSO:baPx9dtIEOZU+ochG

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2