Extracted

• • Target
    https://clicktime.symantec.com/15x87vqLSHUuMbmKAgCjG?h=4vErdN3eiA-mq-vJdwST4Nh7LlOjr57Nt8c4Rk7bse0=&u=https://storage.bunnycdn.com/carnaval/REGISTRO%2520OFICIAL%2520DE%2520DENUNCIA.js?accessKey%3Dd597310b-b0ca-48cf-b1fd7aaafedc-fe3f-47a8%26download

  Score

  10^/10

  inciertodiscoveryexecutionasyncratrat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Suspicious use of SetThreadContext

  behavioral1