Extracted

Extracted

• • Target

    GVTCXYI83010.vbs

  • Size

    844B

  • MD5

    1414060f446d9dc216c622be120be514

  • SHA1

    0f1ce25ce0451fdc55636346271bf09054e00fc0

  • SHA256

    f43970ba4414ecdfe5d42fccb69528917e2fe58dbe684a009c455b1cfacfcb23

  • SHA512

    2e340e98b733cfbef8b671263e3ebb0dafabefa97594ef3e3f59ee406a97075322ba411c5fa6d988e3e892b1bd5b582b4a66f2bce8978d5635b6c7334bdeb11e

  Score

  10^/10

  executionasyncratnewb3saaadiscoveryrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2