Extracted

• • Target

    https://cdn.discordapp.com/attachments/1243203862500999374/1243263413614940170/NOTIFICACION_ELECTORNICA_J_RADICADO_1531385313551_0000_2024_000_3.js?ex=6650d6c8&is=664f8548&hm=0209b0819f3b00abfda0edff87eeaefa05c4577eebb47aadcd0f1725f5e1d42e&

  Score

  10^/10

  asyncrat23 2 3 23executionrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1