General

  • Target

    Stub.exe

  • Size

    168KB

  • MD5

    f02f451ca0dd4bb2250c493742e15074

  • SHA1

    6d1e3fb5131fc2dac5961dc661fa120f777e50bd

  • SHA256

    5792b81a642aff32eac7897ec389da2867f1c20262cbda1579d7d8c8b8bc5485

  • SHA512

    4e496c83630ba4101e6b1465b91fcedacdeaba46356ced828d32e33ca9773fe03aeb583752a3f7c5392e6c2cde89a75ec3fd1838bb817159b5c69300d5c61678

  • SSDEEP

    3072:DVt0u1IoOJFjPjZWb8SKGOr1w4fi35w2Jm:QuWoOtWbgGOr1w4fi3I

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

v0.2

Botnet

apr29_23

C2

sdhvvy7vbysuxnvjdr6gtd64.com:6567

asdvua78v8ed4t6fhvha.cn:6567

asfyvisoeogtca3.fun:6567

saofidubixo4r.top:6567

erouhisugvizi4.cn:6567

Mutex

afgj6j3umd5uk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections