Tracking the Surge in Non-PE Cyber Threats
Essential information
- Published
- 09/05/2024 15:04
- Modified
- 09/05/2024 15:23
- Tags
- 2024-05-04 2024-05-05 2024-05-06 2024-05-07 2024-05-08 2024-05-09 analysis asyncrat infection chain spam
- Related entities
- 13 observables, 1 intrusion sets (apt), 18 techniques (mitre), 1 malware
Description
This intelligence report details a sophisticated infection chain that culminates in the deployment of AsyncRAT, a potent malware designed to breach computer systems and steal confidential data. The meticulous analysis unravels the intricate sequence, commencing with a spam email containing a malicious HTML attachment that triggers the download of various file types, including Windows Script Files, Visual Basic Scripts, and PowerShell scripts. These files work in tandem to bypass security mechanisms, establish persistence, and ultimately lead to the injection of the AsyncRAT payload into the aspnet_compiler.exe process.