AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Detects Windows executables referencing non-Windows User-Agents

Detects executables containing artifacts associated with disabling Widnows Defender

Detects executables embedding registry key / value combination indicative of disabling Windows Defender features

Detects file containing reversed ASEP Autorun registry keys