AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Detect Xworm Payload

Neshta

Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

Suspicious use of NtCreateUserProcessOtherParentProcess

Xworm

Xworm is a remote access trojan written in C#.

Async RAT payload

Blocklisted process makes network request

Command and Scripting Interpreter: PowerShell

Powershell Invoke Web Request.