Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    27112024_0154_new.bat

  • Size

    3KB

  • MD5

    6fc5138d9a459120a712b12ffd55ef44

  • SHA1

    7ecb2535e52971cdde63a30fa2699d0d31de7af4

  • SHA256

    25db2614bacd5fab235fae0dcf994833603604ed37173152c47f288733fa8418

  • SHA512

    bc9462054d421efe81ab605d824cafcb603906b9523dc0bc16629a5d85ad96f81e738fac07a602b5ff46653a57e9571b6e5c257de9ca615a0b7c854f7738a497

  Score

  10^/10

  discoveryexecutionasyncratxwormdefaultvenom clientsrattrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Detect Xworm Payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Async RAT payload

    rat

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2