Extracted

• • Target
    PO#MAIN450000000227897_Sraco_docx.vbs
  • Size 1.6MB
  • SHA256 8ea2bc24236cb1c49b589b4581b297a085e8427d902be24d6df8aee1dd047e68
  • MD5 5e71530fec639439d10db3127d2573fc
  • SHA1 3bb6aea048694a7ab0141323a3b53456b70185bb
  • SHA512 f1ccf0d9dfeafa46f2c66521136720b65f19dd0181f086021409dc6aa2fe649b23a0458f548a9c1f21f8123b4374bae10bb74cf015c54783090c2574d0783cfc
  • SSDEEP 384:V7N7/dbvY7l+hqD7l+7GVg8a/o7l+7bcuk9EPmOjQ7sSVVvAhNaITIqIFI9K7NsX:Hyq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  22-01-2026_jandiscoveryexecutionasyncratrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2