AsyncRat

AsyncRAT is designed to remotely monitor and control other computers.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

suricata: ET MALWARE Generic AsyncRAT Style SSL Cert

suricata: ET MALWARE Generic AsyncRAT Style SSL Cert

suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

Async RAT payload

Blocklisted process makes network request