AsyncRAT
Named by 2 kept items in this workspace.
Search every workspace for AsyncRAT. It matches the name as written, so it can find other things that share it.
The items that name it 2
Detected on the decoded PowerShell loader stage (SHA-256 969b0bfd...879fe), part of the post-staging payload set.
Open-source Remote Access Trojan, one of top 2 detected malware families per Recorded Future's Adversary Infrastructure Report 2023; typically deployed at the end of a longer infection chain; deployment reported by HP Security and Trellix.
All threat actors in this workspace.