AsyncRAT - Malware Samples
466 samples tracked (rolling 30 days)
Last updated: 2026-08-08
This page lists the most recent AsyncRAT malware samples collected from MalwareBazaar. Each entry includes the SHA256 hash (linked to the MalwareBazaar sample page), original file name, file type, size, and VirusTotal detection rate where available. Samples are updated daily and retained for a rolling 30-day window.
How to Use This Data
Security teams can use these hashes in several ways. Import them into your SIEM or EDR platform to detect known AsyncRAT variants in your environment. Cross-reference file names against your email gateway logs to identify phishing campaigns delivering this family. The file type distribution reveals which delivery formats are currently in use - a shift from .exe to .msi or .js may indicate the operators are adapting to your defenses. Samples with low or missing VirusTotal detection rates are the most dangerous - these are fresh variants that may bypass signature-based protection.
About the Data
All samples are sourced from MalwareBazaar, a free malware sample sharing platform operated by abuse.ch. Detection rates come from VirusTotal. This data is provided for defensive purposes only. For the latest AsyncRAT indicators of compromise including C2 servers and domains, see the IOC page.
| SHA256 | File Name | Type | Size | Detection | First Seen | Country |
|---|---|---|---|---|---|---|
| 88e9161f6548b523... | payload_injected.bin | exe | 88.5 KB | 49/71 | 2026-08-08 | - |
| 2b45aeb88bf38dd8... | 点击切换简体中文语言包.exe | exe | 3.1 MB | 27/70 | 2026-08-07 | - |
| e595ec10457cdf21... | startuppaaaa.js | js | 1.1 MB | 28/60 | 2026-08-07 | - |
| 774abc6247967d4f... | PO#098765342.js | js | 85.2 KB | 9/61 | 2026-08-06 | - |
| 12fb4616c7acde29... | especificación.js | js | 226.2 KB | 13/59 | 2026-08-06 | - |
| 16426ff24dfb2d56... | test.exe | exe | 220.5 KB | 38/71 | 2026-08-06 | - |
| c3896171b744c28d... | AU88APP.exe | exe | 26.5 KB | 57/71 | 2026-08-05 | - |
| 8139e9db56741ac6... | dcDiBBVZWJ.js | js | 202.2 KB | 29/60 | 2026-08-05 | - |
| abb9339b50965790... | Machine Order.js | js | 820.1 KB | 30/58 | 2026-08-05 | - |
| 98ae3f60a6f75320... | Copia de confirmacion de pago.vbs | vbs | 887.6 KB | 24/53 | 2026-08-05 | - |
| 7d74d9acc7104c5c... | ORDEN DE COMPRA__.js | js | 189.5 KB | - | 2026-08-05 | - |
| 4fdc7e31fcc7c2ee... | yazi.js | js | 225.2 KB | - | 2026-08-05 | - |
| dec54ac5eebdce2a... | Copia de confirmacion de pago.js | js | 1.0 MB | - | 2026-08-05 | - |
| 32cc5ce6ca786875... | Contract - CB-KLS a c2 (003) - 05.08.26.js | js | 202.3 KB | - | 2026-08-05 | - |
| ab5989434d881ee8... | Account_details.js | js | 207.6 KB | - | 2026-08-05 | - |
| ad6aae00ed364f05... | eds kairos -confirmacion importante del soporte de pago -estacion de servicio el kairos.js | js | 26.3 MB | - | 2026-08-05 | - |
| d8a047f6201766e5... | requerimiento preventivo.js | js | 26.3 MB | - | 2026-08-05 | - |
| 565110ae685e0248... | SecuriteInfo.com.Trojan.Inject6.52624.16299.2826 | exe | 1.0 MB | - | 2026-08-04 | - |
| 8197237b06055f3f... | dlKivxrZVK.js | js | 204.9 KB | - | 2026-08-04 | - |
| 9df545f9a40281bf... | e-dekont.js | js | 219.5 KB | - | 2026-08-04 | - |
| e7303de39d7b302e... | BOLETA DE CITACION IMPUESTA EL DIA 03 DE AGOSTO DEL 2026.js | js | 32.1 MB | - | 2026-08-04 | - |
| 9ce274f0da79ad88... | Demande d'achat_.bat | bat | 110.9 KB | - | 2026-08-04 | - |
| 20f21565d7e77f3b... | download.bin | exe | 69.5 KB | - | 2026-08-04 | - |
| 37a9ec32272ae863... | 37a9ec32272ae8633b64231ba323de25df4190e901ef2544afd99356b3fe49b0.vbs | vbs | 10.4 KB | - | 2026-08-04 | - |
| d87b4127854cdd5d... | VIN88APP.exe | exe | 26.5 KB | - | 2026-08-03 | - |
| 5b636ca0d5d32494... | Order no. 274419.exe | exe | 790.5 KB | - | 2026-08-03 | - |
| 26d90f32df1cd821... | SHBETAPP.exe | exe | 27.5 KB | - | 2026-08-02 | - |
| dc42da3571e4f907... | RFQ & Specifications.exe | exe | 779.5 KB | - | 2026-08-02 | - |
| c65f05b9f92b5d1c... | IntimationRefund2024-2025.vbs | vbs | 4.3 MB | 12/61 | 2026-07-30 | - |
| b7330cf42457ba3a... | ITRIntimation24-25.vbs | vbs | 4.3 MB | 18/61 | 2026-07-30 | - |
| 93a180ec5678568b... | IntimationReturn.vbs | vbs | 4.3 MB | 11/60 | 2026-07-30 | - |
| 46038f8f6f10cbee... | invoice no. #67989.exe | exe | 801.5 KB | 33/69 | 2026-07-30 | - |
| dea0649857c76cea... | Order Invoice #922635.exe | exe | 803.0 KB | 46/69 | 2026-07-30 | - |
| 44bed371f56abd51... | updhfjsbfs.bat | bat | 3.7 KB | 21/55 | 2026-07-30 | - |
| 0a50174b6ef5b50a... | Our Order no. 274419.exe | exe | 789.0 KB | 51/69 | 2026-07-28 | - |
| 1c067af5665a62e9... | Factura n 679 del 24072026.exe | exe | 788.5 KB | 52/68 | 2026-07-27 | - |
| 2945c9a7bdcd5413... | file | exe | 311.5 KB | 48/66 | 2026-07-27 | - |
| ede9c431d7646683... | 1625da7558b52226c5fbd151f8b96c3d.exe | exe | 63.0 KB | 57/68 | 2026-07-27 | - |
| e922b9d3d9b7c8c0... | Nostro Ordine 264418.exe | exe | 861.5 KB | - | 2026-07-27 | - |
| 85a229fa75bcf5ef... | F8BETAPP.exe | exe | 26.5 KB | - | 2026-07-27 | - |
| 53500d036d4c7893... | 78WINAPP.exe | exe | 26.5 KB | - | 2026-07-26 | - |
| 21450a32efcb5684... | F168APP.exe | exe | 26.5 KB | - | 2026-07-26 | - |
| 454f585b6276a2bf... | _DLL-SL_Tax_Notice_89574.img.iso | iso | 684.0 KB | 33/58 | 2026-07-24 | - |
| 58928c973bd77cab... | Swift_Advice.exe | exe | 842.5 KB | 51/68 | 2026-07-24 | - |
| ff8211ab52c5ac68... | S28C-126071109450.7z | 7z | 355.1 KB | 4/61 | 2026-07-24 | - |
| 1ab6defd87d3efe9... | SwiftXAdvice.rar | rar | 747.7 KB | 44/62 | 2026-07-24 | - |
| 4743e163a2bb13ca... | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXITDENF2026-4281.zip | zip | 315.6 KB | 33/65 | 2026-07-24 | - |
| c809b9235003ab4d... | XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXITDENF2026-4282.zip | zip | 309.8 KB | 32/65 | 2026-07-24 | - |
| e77b0473ee512fa6... | Payment Slip.exe | exe | 798.0 KB | 50/69 | 2026-07-24 | - |
| fe1e3f38e6bd2ec3... | Quote Request.exe | exe | 812.0 KB | 48/69 | 2026-07-23 | - |
| 7adba5e80bc94fdd... | Quotation sheet.js | js | 2.7 MB | 21/61 | 2026-07-23 | - |
| 1f79f7239d6f8cd9... | Shipping Documents.js | js | 343.2 KB | 29/59 | 2026-07-23 | - |
| b65652fadf25dda7... | SHBETAPP.exe | exe | 26.5 KB | - | 2026-07-22 | - |
| a5158f3c215e31e1... | AU88APP.exe | exe | 26.5 KB | - | 2026-07-22 | - |
| 40b95ef52169126b... | HSBC CONFIRMATION SEPA 22.07.26 ASY.js | js | 772.0 KB | - | 2026-07-22 | - |
| 0316a0534beb4e36... | Purchase Order PO3157.vbs | vbs | 1.1 MB | - | 2026-07-22 | - |
| d5e5431aea3478bc... | S28C-126071109450.js | js | 571.9 KB | - | 2026-07-22 | - |
| e5dda4e7dc6b9583... | e-dekont_html.exe | exe | 2.1 MB | - | 2026-07-22 | - |
| 5fd493615b731c76... | 47E1B3A9FE7BD09242ACBCBD0D515DED.exe | exe | 122.5 KB | - | 2026-07-21 | - |
| c394b09989c31d4f... | Swift Email Bildirimi 1_html.exe | exe | 2.2 MB | - | 2026-07-21 | - |
| 1624cb659dab77b4... | sample_product inquirywa004678.hta | hta | 1.6 MB | - | 2026-07-21 | - |
| 3565a7a2bb632357... | rar.rar | rar | 3.3 KB | - | 2026-07-21 | - |
| 174047faedae187b... | Sanseredskabet.exe | exe | 402.4 KB | - | 2026-07-20 | - |
| 26fc8807ce9a5e6d... | Dialysepatienter.exe | exe | 219.0 KB | - | 2026-07-20 | - |
| 43fe17a95010413f... | FCA19022289AFFCA0000004409.pdf.exe | exe | 824.0 KB | - | 2026-07-20 | - |
| 938a9136aa1f128c... | 81961B2997CDF859AB8B96C3DD0AFB07.exe | exe | 760.0 KB | 43/68 | 2026-07-17 | - |
| e6d51d45edea7591... | AU88APP.exe | exe | 26.5 KB | 49/65 | 2026-07-16 | - |
| 846ccf956dabc8c4... | securedstub.ps1 | ps1 | 341.9 KB | 25/61 | 2026-07-16 | - |
| 284851633769226e... | 20260716103309159.js | js | 360.9 KB | 14/57 | 2026-07-16 | - |
| 401b70e0313d7f6d... | Products.hta | hta | 1.9 KB | 12/58 | 2026-07-16 | - |
| 65b8743fc32646c2... | Purchase Order.js | js | 208.8 KB | 29/60 | 2026-07-16 | - |
| 0d39da93c95bc61b... | ORDER CONFIRMATION JU142026-771PL.xlsm | xlsm | 174.5 KB | 37/65 | 2026-07-16 | - |
| ea326b9f3adb615c... | SCAN DOC FILE PR 000100265.QB-.js | js | 396.0 KB | 27/59 | 2026-07-16 | - |
| bc2d5313943d2e4a... | Purchase Order.js | js | 546.2 KB | 30/60 | 2026-07-16 | - |
| abca9cfafbc5165e... | VIN88APP.exe | exe | 26.5 KB | 54/69 | 2026-07-16 | - |
| d0eb26a39239d90b... | Sales0rder.js | js | 554.1 KB | - | 2026-07-15 | - |
| 262a0b5128055fb1... | ORDER CONFIRMATION JU142026-771PL.js | js | 208.8 KB | - | 2026-07-15 | - |
| f9e8f438616cb20a... | PO0179776 - SAFETY GLASS.js | js | 1.5 MB | - | 2026-07-15 | - |
| 2b08b67b2681121a... | PO0179776 - SAFETY GLASS.js | js | 1.7 MB | - | 2026-07-15 | - |
| f7fe0e4b8a1b008f... | Order requirement.js | js | 480.5 KB | - | 2026-07-15 | - |
| fe9faa53e2c69c97... | TÀI LIỆU GIAO HÀNGtz0.js | js | 396.2 KB | - | 2026-07-15 | - |
| ff1218a7958943a4... | Orden de Compra [PO-NGHOE33748].vbs | vbs | 1.2 MB | - | 2026-07-15 | - |
| cc7818eb361181c2... | FILES-0987654.js | js | 557.1 KB | - | 2026-07-15 | - |
| e5b838465187678e... | Hesap_Hareketleri14-07-2026_.js | js | 533.7 KB | - | 2026-07-14 | - |
| 40612b9531e0c9ab... | DHL_Shipment_Documents_AWB1370659_ME8933092.js | js | 2.4 MB | - | 2026-07-14 | - |
| ff6b4d5c82f96a4b... | HK0987654323456780.js | js | 496.3 KB | - | 2026-07-14 | - |
| 24ae9a43b77aafcb... | fjkdhjdskqke.bat | bat | 4.5 KB | - | 2026-07-14 | - |
| 84747c0662aab4f6... | 1C26TYY00000560.js | js | 526.8 KB | - | 2026-07-14 | - |
| 6773709e7c85e57a... | NEW88APP.exe | exe | 26.5 KB | - | 2026-07-14 | - |
| a6ec0a5f8122e29d... | F8BETAPP.exe | exe | 27.5 KB | - | 2026-07-14 | - |
| dc14aa1d739c79a9... | 01RFQProductListandSpecifications.js | js | 525.9 KB | - | 2026-07-13 | - |
| ed0f08343c0f3288... | S8APP.exe | exe | 26.5 KB | - | 2026-07-13 | - |
| aca480ae93ba4362... | AU88APP.exe | exe | 26.5 KB | - | 2026-07-13 | - |
| 2d5b38af2b9b6b5b... | AU88APP.exe | exe | 27.5 KB | - | 2026-07-13 | - |
| ae3811913d691d03... | _APPDATA__primer.exe | exe | 276.5 KB | 25/68 | 2026-07-11 | - |
| a3d3e88ab510a5bd... | HG98763456789000.js | js | 517.8 KB | 17/59 | 2026-07-11 | - |
| 3758bbe67d3bb290... | 3758bbe67d3bb290e49a4317881084eb64e1e4228af281382059d4ad0e5c11c1 | exe | 782.3 KB | 41/69 | 2026-07-09 | - |
| 1b578402eebfe063... | 1C26MYY_1431.js | js | 460.9 KB | 11/58 | 2026-07-09 | - |
| dbd43f8a5c6e6ca2... | Siparişi - 75158991-803.vbs | vbs | 1.1 MB | 26/59 | 2026-07-09 | - |
| 2d6156646c286071... | lnvoice8343783.js | js | 4.6 MB | 23/53 | 2026-07-07 | - |