In-memory load of Veukuzmw.dll AsyncRAT payload inside charmap.exe

Ankit Mehta@Secvyn

•updated 25 days ago•1•0•1

Detects the reflective or in-memory loading of the AsyncRAT DLL (Veukuzmw.dll) into the memory space of the legitimate Windows process charmap.exe, characterized by a lack of corresponding disk activity or suspicious process command-line arguments.