General

  • Target

    Stub.exe

  • Size

    65KB

  • MD5

    46d01b897ab24927386d833e630b169b

  • SHA1

    561605aee3e28603fe8e13bf9842b43daa2cc643

  • SHA256

    9be72fd888085db2d0b72e1bd4a2c4e986b5c0ad6c1ce873c25d6cf289bc72e0

  • SHA512

    62d8afd488eed1a5478b3bf0b432d8d32e8e31b4590d43a7773665d4c2158e985d29b8f3226f18cd10da9558b040bddcff7cff7ded3dc38e8f5612453d8dae6e

  • SSDEEP

    1536:/A2Fhvk7JknoDR58tXwL6cgue6rsgE8PU6agj3OJ4G+hbtEd7AJRX8roTR9x:Y2FhvkNkgE8PU6ag6J4zhbtlW2nx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

joker

C2

209.145.56.0:57

Mutex

AsyncMutex_fff

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections