Extracted

• • Target

    NHLRYQURTHYLDPQY.ps1

  • Size

    553KB

  • MD5

    c88852416b438cbe21113af942ab15dd

  • SHA1

    19461a3637ef93ba30f16c29f0923ac7cefa4f89

  • SHA256

    f935cb171e728477ac095eccefb4d744d28eb4a130802f6c5ece72b3fa43a739

  • SHA512

    267ff636a32ee6a4e366a481908af3f13283074e3ad0b82818e73f4fd3ec8d9efcbce6329ad650fb391c047e9dbb025a89d23b01069d06917fafc0ce028ec2a6

  • SSDEEP

    1536:kDh8DyXBs84VhDEak0EyxWq0SvZNjJwGvPQoab95LXXVsXG:kDhiyXBs84VhDEakbyxWq0SE

  Score

  10^/10

  executionasyncratxxxv3rhr9jn93vmoxv9credential_accessdiscoveryratstealer

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2