General
- Target google.exe
- Size 42KB
- Sample260712-s4mftact5m
- SHA256 f02a1756a7bbf7c00175fc2cbf1a120520eb869e4df6563a42d5eb5256733237
- MD5 fb5bb3b21cc4b85570aebed08b7a4278
- SHA1 695fbad2da05070ef2d0e9765a31eee8173c7193
- SHA512 2d591a127917f6b9226a7402bc0dae8828105eeaa579ee68ecd97da62291ee4acccf68022a0022f8dcf262edb0def1c8f567df79e6802f254babaa3f5bae2017
- SSDEEP 768:Z56SQoX4xI0+llvY/XN0MtaDjgdWJx44pf+:Z94VElAfN18Djggx4Qf+
- TLSH T190134C04BFE9C57BE3BE4F7858E2630546B5E9A72503EA891CC400FA1617FC58B416EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
google.exe
Resource
win10v2004-20260513-en
Malware Config
Extracted
-
asyncrat
-
1.0.7
-
Default
-
aimful.io:443
-
aimful.io:80
-
aimful.io:25
-
aimful.io:8443
-
www.aimful.io:443
-
www.aimful.io:80
-
www.aimful.io:25
-
www.aimful.io:8443
-
data.aimful.io:443
-
data.aimful.io:80
-
data.aimful.io:25
-
data.aimful.io:8443
-
malware.aimful.io:443
-
malware.aimful.io:80
-
malware.aimful.io:25
-
malware.aimful.io:8443
-
ddos.aimful.io:443
-
ddos.aimful.io:80
-
ddos.aimful.io:25
-
ddos.aimful.io:8443
-
v2.aimful.io:443
-
v2.aimful.io:80
-
v2.aimful.io:25
-
v2.aimful.io:8443
-
v3.aimful.io:443
-
v3.aimful.io:80
-
v3.aimful.io:25
-
v3.aimful.io:8443
-
atex.aimful.io:443
-
atex.aimful.io:80
-
atex.aimful.io:25
-
atex.aimful.io:8443
-
phishing.aimful.io:443
-
phishing.aimful.io:80
-
phishing.aimful.io:25
-
phishing.aimful.io:8443
-
backup.aimful.io:443
-
backup.aimful.io:80
-
backup.aimful.io:25
-
backup.aimful.io:8443
-
quantri.aimful.io:443
-
quantri.aimful.io:80
-
quantri.aimful.io:25
-
quantri.aimful.io:8443
-
DcRatMutex_qwqdanchun
-
delay
9
-
install
true
-
install_file
google.exe
-
install_folder
%AppData%
Targets
-
- Target google.exe
- Size 42KB
- SHA256 f02a1756a7bbf7c00175fc2cbf1a120520eb869e4df6563a42d5eb5256733237
- MD5 fb5bb3b21cc4b85570aebed08b7a4278
- SHA1 695fbad2da05070ef2d0e9765a31eee8173c7193
- SHA512 2d591a127917f6b9226a7402bc0dae8828105eeaa579ee68ecd97da62291ee4acccf68022a0022f8dcf262edb0def1c8f567df79e6802f254babaa3f5bae2017
- SSDEEP 768:Z56SQoX4xI0+llvY/XN0MtaDjgdWJx44pf+:Z94VElAfN18Djggx4Qf+
- TLSH T190134C04BFE9C57BE3BE4F7858E2630546B5E9A72503EA891CC400FA1617FC58B416EA
- MD5 SHA1 SHA512 SSDEEP TLSH