#ParsedReport #CompletenessMedium
10-09-2026

AsyncRAT Delivered via AutoIT: Full Chain Analysis

https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/

Report completeness: Medium

Threats:
Asyncrat
Process_injection_technique
Amsi_bypass_technique
Process_hollowing_technique

TTPs:
Tactics: 8
Technics: 10

IOCs:
File: 12
IP: 2
Hash: 5

Soft:
Process Explorer

Algorithms:
xor, base64, zip

Functions:
WriteProcessMemory, CreateRemoteThread, WriteAllBytes, juvblrzsrqclnupfstcrk, CaptureScreen

Win API:
OpenProcess, irtualAllocEx →, teProcessMemory → Cr, eRemoteThread chain, WriteProcessMemory, VirtualAllocEx, CreateRemoteThread, CloseHandle, AmsiScanBuffer

Languages:
powershell, autoit