AsyncRAT — Unpacking a Multi-Stage Loader (CyberDefenders)
Scenario You are a cybersecurity analyst at Globex Corp. An employee opened an email attachment claiming to be an order specification, which actually carried a JavaScript file designed to deploy AsyncRAT. The malware evades detection efficiently. To secure the network, you must analyse the attachment, reverse-engineer AsyncRAT’s obfuscation techniques, and determine the scope of the infiltration. Tools used: obf-io.deobfuscate.io, CyberChef, DnSpy, the browser console, and PowerShell Get-FileHash. Investigation Q1. What is the name of the variable that conceals the obfuscated code? Opening the script, the malicious logic is buried under heavy obfuscation: ...