General
-
Target
SkibidiToilet.exe
-
Size
73KB
-
MD5
19c0085f5d9e7ab2a11b522dc3932374
-
SHA1
540071db910e9be88ce24c645e6efdd77df21051
-
SHA256
5454b8252072f0e50de69a2d1771be15681c5fe202341b02d92520b7fa64cd2b
-
SHA512
be97c1637014ace2c26372c6d53c138cb020b3daf907bff69d06d6d14d62727383376471dd04f6c4df8b57fbe4c61f56523607528f274eb90c1c1ff3646b512c
-
SSDEEP
1536:NUxQcxHCapCtGPMVcRVg/IrH1bC/9t4Qzc33VclN:NUOcxHCoeGPMVcQiH1bCH4QSlY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
ezzzz
180.148.109.233:53873
susamoguspasta
-
delay
3
-
install
true
-
install_file
amogus.exe
-
install_folder
%AppData%
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource SkibidiToilet.exe
Files
-
SkibidiToilet.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ