MALWARE FAMILY

AsyncRAT

Internal ID: win.asyncrat

aliases

Last seen:Mar 17, 2026

Intelligence Profile

AsyncRAT is a Remote Access Tool (RAT) designed to remotely monitor and control other computers through a secure encrypted connection. It is an open source remote administration tool, however, it could also be used maliciously because it provides functionality such as keylogger, remote desktop control, and many other functions that may cause harm to the victim’s computer. In addition, AsyncRAT can be delivered via various methods such as spear-phishing, malvertising, exploit kit and other techniques.

Threat Analysis

AsyncRAT is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://0xmrmagnezi.github.io/malware%20analysis/AsyncRAT/

→https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/asyncrat-onenote-dropper

→https://aidenmitchell.ca/asyncrat-via-vbs/

→https://asec.ahnlab.com/en/87621/

→https://assets.virustotal.com/reports/2021trends.pdf

→https://axmahr.github.io/posts/asyncrat-detection/

→https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-re-entered-the-top-ten-after-brief-hiatus/

→https://blog.cyber5w.com/analyzing-macro-enabled-office-documents

→https://blog.morphisec.com/ahk-rat-loader-leveraged-in-unique-delivery-campaigns

→https://blog.morphisec.com/asyncrat-new-delivery-technique-new-threat-campaign

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.asyncrat

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search AsyncRAT