General
- Target Stub.exe
- Size 61KB
- Sample221216-bwtfqagf8w
- SHA256 55df3917ad56d204f96fd28eef9f0803169383497fd543a6e5c4dabbfa897d52
- MD5 6064742c6f8a136b29ed885915389ba9
- SHA1 5bdb7964d9524b0c1c2ceabadc72e6abee55afc3
- SHA512 6b4f55ef7e94bc774f5856f8ca70c65db0964f30dddc3aaa0855be502d5c71ea5c86ddfba73f4a0f47ecdcd2c0465d5925fc41e0fab3a4ed351eaac92f85b495
- SSDEEP 1536:1T6dH9JYaQXD5iETdbcbpgrBg8pkLbkx:1T6dH3YaQXFiE5bc4gVLgx
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Stub.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
| Edit 3LOSH RAT
Botnet
-
Bypass
C2
-
ridaq1.is-a-caterer.com:2005
-
ridaq2.is-a-caterer.com:2005
Mutex
-
AsyncMutex_red
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target Stub.exe
- Size 61KB
- SHA256 55df3917ad56d204f96fd28eef9f0803169383497fd543a6e5c4dabbfa897d52
- MD5 6064742c6f8a136b29ed885915389ba9
- SHA1 5bdb7964d9524b0c1c2ceabadc72e6abee55afc3
- SHA512 6b4f55ef7e94bc774f5856f8ca70c65db0964f30dddc3aaa0855be502d5c71ea5c86ddfba73f4a0f47ecdcd2c0465d5925fc41e0fab3a4ed351eaac92f85b495
- SSDEEP 1536:1T6dH9JYaQXD5iETdbcbpgrBg8pkLbkx:1T6dH3YaQXFiE5bc4gVLgx
- MD5 SHA1 SHA512 SSDEEP
-
Async RAT payload