General
-
Target
FUDStealer.exe
-
Size
63KB
-
MD5
ad21ca7ae9d37ab2c528987789639edc
-
SHA1
e4e47defbc7c51bffb354e7301dec64ee2006fcc
-
SHA256
f6911593541f29c776f6069236c894d235bc57a4366f51d5f912d4c23f6675af
-
SHA512
78016a1d8509049ad76702de2c2aef12ea7d186fb65b4580a67994e4d6d2e9569e9ef63b1839aa2d8551b5c98e5eaa81acce9ea4b07f50b8a1c1839503be6c1d
-
SSDEEP
1536:nUFBbYLqdvp7jykr1JIYUbChyXZku9PpqKmY7:n0XXuYUbC+dMz
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
192.168.254.132:28479
Mutex
8CjWω西V3S贼Gω斯TيqG迪اΙ
Attributes
-
delay
1
-
install
true
-
install_file
WindowsPatcher.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
FUDStealer.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections