Behavioral task
behavioral1
Sample
Stub.exe
Resource
win7-20230831-en
General
-
Target
Stub.exe
-
Size
65KB
-
MD5
e387b3d2935a35d064b52c570982af25
-
SHA1
ff72aa2b79a4abb1d862011b3a11a73d2df5d481
-
SHA256
0ae22c1e874d14cfaffa061cb5761a69828f45d7646fc851a742bfd561e9e19f
-
SHA512
cd21854e4fb1ed95dde80289a8f8df5082f703759ca024062a40fe29d40c1896d6a15b6202c06bf8abfaf94df0d3e2f1fbd881d24b272c7c98892eaaf549fc67
-
SSDEEP
1536:/O2/XS4ripkVkJHKmrZHv6mqoo4oK5E8fU6aFEAHY4Pb8OKtQOPUX8rgTRux:G2/XHripkKE8fU6aucY4PbpIP1eMx
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
26Sep
4.151.131.10:2404
AsyncMutex_Ed
-
delay
3
-
install
false
-
install_file
Word.exe
-
install_folder
%AppData%
Signatures
Files
-
Stub.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ