Extracted

• • Target
    https://cdn.filestackcontent.com/ZzASd2wuQGmcIAW12mGc

  Score

  10^/10

  edd011discoveryexecutionasyncratpersistenceratsuricata

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Suricata alert: AsyncRAT Malware Default X.509 Certificate Detected - Inbound

    Network activity triggered a Suricata alert

    suricataasyncrat

  • Suspicious use of SetThreadContext

  behavioral1