General

  • Target

    Stub.exe

  • Size

    66KB

  • MD5

    96eb8db3c4ffe181ac4450eaaa6513f1

  • SHA1

    f16dc6ea0347b20c0068e6ba4cd95cb3d19b91a0

  • SHA256

    3034bceecf18becc7f02681010606eb001d67da625167966a649d6b89d3a3d38

  • SHA512

    107006722904993b4998daaf1ac52cf81a1dcd86457f58395e3037cc7284d2bbcfd200331612c1176d943a649d47575a13827650b81027fef9e8e604b0136414

  • SSDEEP

    1536:P2wukvF1ak9gcKu5UYFlBdkxQ4BEUupb1t5CtqNRYe2arPlTGxx:P2dkvF1ak9Ku5UYFlEa+Pupb1LzNRbd

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

T2

C2

mo1010.duckdns.org:2020

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections