General

  • Target

    Stub.exe

  • Size

    60KB

  • MD5

    e50e5c919322ad54bd5ed6eefba01619

  • SHA1

    988a6155484ea1e07883a1dd97ff1d97083adc5a

  • SHA256

    e4384cce1f9ea5e5c1e2fdb0af7ed8f25724c2618e462ae9fced298c24d7b095

  • SHA512

    5e017ccca9abeccf8837c4c249b09019db8ad06e041b5a3d14d97b5cb0e16c57651e548936b872171eac43c8d16bc864e4726c6431e6a5ff947b68163f395be5

  • SSDEEP

    1536:4EKoM1cSSTTGBfu4maBqJubMo/ZlB9wyaeXAFmf+:XK4aBjmaBqJubMsp97hXAQm

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

SuperBoo Rat v1.1

Botnet

Default

C2

com-distinct.gl.at.ply.gg:26706

Mutex

SuperBoo_mtex_920393

Attributes
  • delay

    3

  • install

    true

  • install_file

    gang.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections