General

  • Target

    ersyb.exe

  • Size

    3.0MB

  • MD5

    5d19a21c61d16d22619b846816a0e270

  • SHA1

    8aba1f6780ec5a1e389a193821f727b9e8ddb710

  • SHA256

    e0cc614e2c756bfe9eb3773daa8d6c0ac66a2902826f5ccbd94113e3ff69e3db

  • SHA512

    1a6f7daf3778f2b095092187d2d9540d27320100f0dbac8d29e48b34a1f929d1eb928344a0046ad3952825e1f9006a72f9821a6509dc54a392976b3b0358b580

  • SSDEEP

    49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZ7r/N2e:0GFQ3mdatQSm

Score
10/10

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ersyb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections