General
-
Target
WaveInstaller.exe
-
Size
48KB
-
Sample
240711-psaq4awfjr
-
MD5
ffdbfa925cfd5b6a8de01878050d5c02
-
SHA1
3f44bd4133b98f94b3085050b951bcba3b7ff837
-
SHA256
3d2d4ea5e9f269ef05bdb96e6822f310278b96597eaef98aa65e1df140a4815e
-
SHA512
3ea2bdb9c835248b07c67a95ff1a466d63077d47edb9982c046f9f4f36bd1301ac5c3a3b472e96e6c01a17804bcd9a89886bf78d8a617961b60469b8485e900a
-
SSDEEP
768:qH1fhILbkJt+RiDaB2PiMZ8YbOgRoC5l5OvEgK/JAZVc6KN:qH1Nvxnzbxl4nkJAZVclN
Behavioral task
behavioral1
Sample
WaveInstaller.exe
Resource
win7-20240708-en
Malware Config
Extracted
asyncrat
1.0.7
Default
127.0.0.1:8848
https://ooo.fluffiflower.xyz/:8848
ooo.fluffiflower.xyz:8848
2.132.191.110:8848
0.0.0.0:8848
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_file
Explorer.exe
-
install_folder
%AppData%
Targets
-
-
Target
WaveInstaller.exe
-
Size
48KB
-
MD5
ffdbfa925cfd5b6a8de01878050d5c02
-
SHA1
3f44bd4133b98f94b3085050b951bcba3b7ff837
-
SHA256
3d2d4ea5e9f269ef05bdb96e6822f310278b96597eaef98aa65e1df140a4815e
-
SHA512
3ea2bdb9c835248b07c67a95ff1a466d63077d47edb9982c046f9f4f36bd1301ac5c3a3b472e96e6c01a17804bcd9a89886bf78d8a617961b60469b8485e900a
-
SSDEEP
768:qH1fhILbkJt+RiDaB2PiMZ8YbOgRoC5l5OvEgK/JAZVc6KN:qH1Nvxnzbxl4nkJAZVclN
-
Deletes itself
-
Executes dropped EXE
-