Distribution of AsyncRAT Disguised as Ebook
Essential information
- Published
- 10/07/2024 09:22
- Modified
- 10/07/2024 09:29
- Tags
- 2024-07-10 asyncrat obfuscation persistence powershell trojan
- Related entities
- 5 observables, 12 techniques (mitre), 1 malware
Description
This analysis covers the distribution of AsyncRAT malware disguised as an ebook. The compressed file contains a malicious LNK and PowerShell scripts that ultimately execute AsyncRAT. The malware employs various techniques, such as obfuscation, task scheduling, and anti-VM and anti-AV capabilities, to maintain persistence and exfiltrate user information while receiving commands from the threat actor. Particular caution is advised due to the potential for widespread distribution via phishing emails and file-sharing websites.