Extracted

• • Target

    NHLRYQURTHYLDPQY.ps1

  • Size

    559KB

  • MD5

    2684613c1f5db2fd250bc0551887419c

  • SHA1

    1a29e5c18976095f7fe5719bd3d16c36fd3db5fd

  • SHA256

    41ae3eb86359c776ac1b40faf1eb43eb7d874cbf233444aa3af554257d64e62a

  • SHA512

    aea057c3526c8b8d7177f94cc32f5c5c021529461f7f657ac36a26da584dbaa92ac8fd976b6d66177d48d22b52cace678186885afe9cc24c4da6c6cb0cf7df33

  • SSDEEP

    1536:kDh8DyXBs84VhDEak0EyxWq0JnZcjCuPSWaZauagEGG8dw:kDhiyXBs84VhDEakbyxWq0JSv

  Score

  10^/10

  executionasyncratdefaultcredential_accessdiscoveryratstealer

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2