Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    20112024_1640_new.bat

  • Size

    3KB

  • MD5

    072bfacf745a6d9d2fcd710dc0eddc2c

  • SHA1

    b926adccaf5181c12713164a57f878316cfcdabc

  • SHA256

    283a4a43c44d9bc096c52ad644bd77f2129e65fbc8e1964e419f39d1cba4386d

  • SHA512

    568f3b32c0839bd4830e22ffad8d50f0cfcea3e294e5d7952132da956c412c33305cc0bca1f5df08848edd4296d3e1d00cb6206a4ef172d5b769b35c49166f4b

  Score

  10^/10

  discoveryexecutionasyncratxwormdefaultvenom clientsrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Detect Xworm Payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Async RAT payload

    rat

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2