General

  • Target

    Stub.exe

  • Size

    62KB

  • MD5

    aea08c07bbc5ba70989d165374b3da4e

  • SHA1

    5ac5542073e227d094287ce0d36d015203b577d6

  • SHA256

    91bff591cfddde25da4bc8eb593fbf89aa1981ce74357b0935264f024de13f6d

  • SHA512

    99d01b719b323e4cf9a6cd8fbf6a9dcc69ceab6f91329ad939db93f4a988f7fc4a2fe76180dd27c3259834835a110e3787b2b540764328914e1ec9b08b63c0ef

  • SSDEEP

    1536:/F2UkM9DZk1nukMPaoljhSnOuVw8hE8PU6a6KMz5bs6g6g+mNXHgnono+X8roTRb:N2UkM9DZkFE8PU6a6KMz5bsXD+mFAnoD

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

ASMOUNDOX

C2

dkteamfix.webhop.net:2266

Mutex

AsyncMutex_doxi394iw3

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections