Extracted

Extracted

Extracted

• • Target

    V00GH01_Invoice_Copy.vbs

  • Size

    3KB

  • MD5

    f0eb4b843b026d5d100f69d47c2f576e

  • SHA1

    f29356a70659a502ef8eea82fef2cc05e92d80fd

  • SHA256

    c083348abc25e7c20eed06e9ceddd94af7b4787ea22dbca312d4b9e8504cf882

  • SHA512

    57165f90091e183b248dc0cb8f7a8ca8dffa68818b4bbc045e7128ed13326c71e94de1111daefcd6875438afe3b2b765d51195ea1e3a0f8e986c74956f00c801

  Score

  10^/10

  asyncratnjratdefaulthackedratsuricatatrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers.

    ratasyncrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata

  • suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

    suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

    suricata

  • Async RAT payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2