AsyncRAT - Dual-Trigger Scheduled Task Creation (T1053.005)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•2•0•2

Identifies schtasks.exe creating persistence mechanisms configured with both logon and startup triggers simultaneously, a signature of the CheckRealtekAudioVersion task.