AsyncRAT - Hardcoded Mutex Creation

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•6

Identifies the active execution of the modular RAT payload through the detection of its campaign-specific static mutex. Specifically, it looks for the creation of a mutex with the hardcoded string "IDG5FUAM3PSONBSInGIGSWSD".