Extracted

• • Target

    JaffaCakes118_fcf393b445d4f0b001d53e097db8e5fe

  • Size

    71KB

  • MD5

    fcf393b445d4f0b001d53e097db8e5fe

  • SHA1

    8c46fdbab506cd8aa5cdec4a6347e9c655c387e3

  • SHA256

    6d42ab03dc8bf128ef84fd8c6a33b113ac9961077f72ab94a353a5e4f05aac61

  • SHA512

    d30371c10b63ce8a9649de204e19769f22b0e9c1a15938418556e79c4df2d80e72322f24afcfe5c0f2a6b02663c174c76f0e0c6c4bd923c1cf1f5b1e3fb4eacb

  • SSDEEP

    1536:H9WXJ4FGFYQRVU6EkaS3Ystx7Adpf7PS5TSVHbFqZKdMF/gTwHMBy:UAw26Eka1sLeZ7PS5TSdFqZFoE

  Score

  10^/10

  asyncratdefaultdiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2