Advanced CyberChef Tips: AsyncRAT Loader

Huntress SOC documents their step-by-step manual decoding of an obfuscated persistent VBScript using CyberChef and regular expressions to defeat decimal (Chr) encoding, reversed strings, Replace calls, and string concatenation, revealing a BAT/PowerShell loader that deploys AsyncRAT; the post explains their methodology, tooling, and follow-on analysis of the payload.