Overview

overview

10

Static

static

10

lol.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lol.exe

  • Size

    65KB

  • MD5

    e8b71641eb94ffeb29aba4d95f569f40

  • SHA1

    18c2020d0ae178c0e32046a579664a38ade7c119

  • SHA256

    da21e7ec8b2de044dba96443e9cbe1e6deac43df4c3043494b13d7a0731ad13e

  • SHA512

    01e0f1d30de78c2c99c8961fbf692cde89d03c8d70b8afc8e67606d044938aabdb374039b16f31f6ec2e8def1b57ae057e31e5f041d54428b46921b5e2d43350

  • SSDEEP

    1536:D2FpiG7JknoDR58tXwL6cgue6rsgE8PU6a2GgZGlTHFQH8bDWaoqwoeM8rBTRqx:D2FpiGNkgE8PU6a2BGlT88bDbwoe9JQx

Score
10/10
ratmethod ddlasyncrat

Malware Config

Extracted

Family

asyncrat

Version

AWS | 3Losh

Botnet

method ddl

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

twinks234.duckdns.org:6606

twinks234.duckdns.org:7707

twinks234.duckdns.org:8808
Mutex

fdgdfg

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lol.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections