This article was originally published on ThreatChain — decentralized threat intelligence.

Open-source. Free. And in the hands of thousands of attackers who use it to watch your every move through your own webcam.

A new AsyncRAT sample was identified by threat intelligence feeds on 2026-05-08 17:59:02. This post breaks down what we know about the specific sample, how to recognize related activity on your network, and what to do if you or your organization might be affected.

The Sample at a Glance

Field Value

SHA-256 103bf7cda93749567f7e16e48cd205fd059fdda7f7396a781c6e4a096a3b47d7

File name Telegram (1).exe

File type exe

Size 112.0 KB

Origin (first observed) VN

First seen 2026-05-08 17:59:02

Family AsyncRAT

Tags AsyncRAT, c2, dcrat, exe, rat, windows

VirusTotal detection 53/75 engines flagged malicious

What AsyncRAT Does

AsyncRAT is an open-source remote access trojan that criminals have endlessly modified and reused.…