Behavioral task
behavioral1
Sample
Stub.exe
Resource
win7-20230831-en
General
-
Target
Stub.exe
-
Size
66KB
-
MD5
93f1ab2325d4e6c3a1c2a0a01c6437bc
-
SHA1
39c82867d77379637771304db1b93b808efee1b7
-
SHA256
e91838e3f9c6aa4e1e043fa30ac176081877347166e52aa9b9cb1e7f25acecbf
-
SHA512
1372a793702f90ad445787041b1bfd43f1a155ded2e9f822124e208c574536f13c6160d127a1242493d1665f296c43782a5a093ec43c33f63f500f4e24fd2e3c
-
SSDEEP
1536:P2wmkPN1ak1gcKu5UYFpY/jCBebb0UZkg7pVop1rPlTGxx:P21kPN1ak1Ku5UYFp6Mebb0Q9gdCx
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
Default
forlatinamerica.bumbleshrimp.com:2404
AsyncMutex_Tre
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Stub.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ