AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Asyncrat family

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Modifies WinLogon for persistence

Modifies Windows Defender Real-time Protection settings

Modifies security service

Windows security bypass

Command and Scripting Interpreter: PowerShell

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

Modifies Windows Firewall

Possible privilege escalation attempt