AsyncRAT malware
AsyncRAT is an open-source .NET remote access trojan widely reused by commodity actors. It offers remote control, keylogging, file management and plugin loading, and stores its configuration (C2 hosts, ports, mutex, install settings) encrypted inside the binary.
Malva.RE has analysed 516 public samples tagged AsyncRAT, statically and without execution. The latest public sample was seen on 2026-10-25.
File types
- PE Executable40
Recurring C2 endpoints
tatovlog[.]top2knice[.]co2pea[.]radio[.]fm198win[.]tools1master[.]hk[.]com1tubidy[.]radio[.]am1astp[.]africa[.]com198winnnn[.]online1shopvumanhcuong[.]com1slotwallet777[.]co1
Defanged. Extracted statically from the configurations of public samples.
Latest public AsyncRAT samples
Analyse your own AsyncRAT sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free