General

  • Target

    Stub.exe

  • Size

    65KB

  • MD5

    e387b3d2935a35d064b52c570982af25

  • SHA1

    ff72aa2b79a4abb1d862011b3a11a73d2df5d481

  • SHA256

    0ae22c1e874d14cfaffa061cb5761a69828f45d7646fc851a742bfd561e9e19f

  • SHA512

    cd21854e4fb1ed95dde80289a8f8df5082f703759ca024062a40fe29d40c1896d6a15b6202c06bf8abfaf94df0d3e2f1fbd881d24b272c7c98892eaaf549fc67

  • SSDEEP

    1536:/O2/XS4ripkVkJHKmrZHv6mqoo4oK5E8fU6aFEAHY4Pb8OKtQOPUX8rgTRux:G2/XHripkKE8fU6aucY4PbpIP1eMx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

26Sep

C2

4.151.131.10:2404

Mutex

AsyncMutex_Ed

Attributes
  • delay

    3

  • install

    false

  • install_file

    Word.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections