Extracted

• • Target

    AsyncClient.bat

  • Size

    63KB

  • MD5

    dbce32c8a127cd9a7966fe4a47071071

  • SHA1

    f1866b877b463be6df04dace8bccec70e11ce311

  • SHA256

    79d51a6e1d88225fbdf916f4f608ce53e563440df0b23d5f3ccc3aba1f12d7d5

  • SHA512

    e2165665aa1000a133734a760d78e341053ad0dbd5e904d4a58675167839b758423df8b71e206b1648fc44cb48ecd1c97a853cfac5f4b7b3d443d048d77266c6

  • SSDEEP

    1536:rUqEZ9FzJrPZjPIUNcjvJsS/akFhJYCFyCteszYN:rEjPDTWakjpA0+

  Score

  10^/10

  executionasyncratzgratratedrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Async RAT payload

    rat

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2