General
- Target google.exe
- Size 42KB
- Sample260719-ms8a9ahv5j
- SHA256 2115e745dcedf8608476f6c1f0140fb847dec948a16dc7db16cbb03a209ff2f8
- MD5 39ed3c405061b8b3714565a73e5e68b5
- SHA1 767b3a0adfdd265d1914cdbe5acf7bee38015f12
- SHA512 1d63ccd58839931b310752549e4f4f318c5de01989a62a43afc9f5efb565be8651665c6f227bdea55977281593fc70723b367aa397f807593460b5629ce6a4f8
- SSDEEP 768:tz9ySQgP0gxI02llv//XN0M2DjgLWJx44Of+:tl0gVMlHfN12Djgex47f+
- TLSH T15A133C00BFD9C57BE3BE4F7858A3530546B5E9A72503DA8D1CC400FA1A17FC99B416EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
google.exe
Resource
win10v2004-20260513-en
Malware Config
Extracted
-
asyncrat
-
1.0.7
-
Default
-
wadax.io:443
-
wadax.io:80
-
wadax.io:25
-
wadax.io:8443
-
www.wadax.io:443
-
www.wadax.io:80
-
www.wadax.io:25
-
www.wadax.io:8443
-
data.wadax.io:443
-
data.wadax.io:80
-
data.wadax.io:25
-
data.wadax.io:8443
-
malware.wadax.io:443
-
malware.wadax.io:80
-
malware.wadax.io:25
-
malware.wadax.io:8443
-
ddos.wadax.io:443
-
ddos.wadax.io:80
-
ddos.wadax.io:25
-
ddos.wadax.io:8443
-
v2.wadax.io:443
-
v2.wadax.io:80
-
v2.wadax.io:25
-
v2.wadax.io:8443
-
v3.wadax.io:443
-
v3.wadax.io:80
-
v3.wadax.io:25
-
v3.wadax.io:8443
-
atex.wadax.io:443
-
atex.wadax.io:80
-
atex.wadax.io:25
-
atex.wadax.io:8443
-
phishing.wadax.io:443
-
phishing.wadax.io:80
-
phishing.wadax.io:25
-
phishing.wadax.io:8443
-
backup.wadax.io:443
-
backup.wadax.io:80
-
backup.wadax.io:25
-
backup.wadax.io:8443
-
quantri.wadax.io:443
-
quantri.wadax.io:80
-
quantri.wadax.io:25
-
quantri.wadax.io:8443
-
DcRatMutex_qwqdanchun
-
delay
9
-
install
true
-
install_file
google.exe
-
install_folder
%AppData%
Targets
-
- Target google.exe
- Size 42KB
- SHA256 2115e745dcedf8608476f6c1f0140fb847dec948a16dc7db16cbb03a209ff2f8
- MD5 39ed3c405061b8b3714565a73e5e68b5
- SHA1 767b3a0adfdd265d1914cdbe5acf7bee38015f12
- SHA512 1d63ccd58839931b310752549e4f4f318c5de01989a62a43afc9f5efb565be8651665c6f227bdea55977281593fc70723b367aa397f807593460b5629ce6a4f8
- SSDEEP 768:tz9ySQgP0gxI02llv//XN0M2DjgLWJx44Of+:tl0gVMlHfN12Djgex47f+
- TLSH T15A133C00BFD9C57BE3BE4F7858A3530546B5E9A72503DA8D1CC400FA1A17FC99B416EA
- MD5 SHA1 SHA512 SSDEEP TLSH