General
- Target 4gaiinqjchiisfg7.exe
- Size 76KB
- Sample260809-dwwbesyhqh
- SHA256 5ea8636c8c90fa1f36b6f40df3a37ec9b3873317f18545e48ad567de14e5784f
- MD5 a1db5d0b44dc94c7dde791d902a86d8e
- SHA1 9595e5b2f6be103bc668863f43dd3a2a380b5a28
- SHA512 132b6ae1a032c895bfafd1f4fa204ddd15f7cc313c71715d511dee3202dfda6c4cf1ea919230681731f5f745c24b05838a1088a2c99d3b986e6473c3471dbc27
- SSDEEP 1536:tq60OoD4p6hcqe4UVCJe0GkfAHSnWzVbHIlX2Y29fM03alKVxF+:tx0OM4l4U4oyWzVbHKX2n9F+K3Q
- TLSH T189735C447BE8802AF2BE4BB4DCF362054575F5636A22D75E0DD411E90A62FC1EA036FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4gaiinqjchiisfg7.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
false
Mutex
-
g)93@&ncf2*2$231wti%q3$
Attributes
-
delay
0
-
install
false
-
install_file
WindowsHealthService
-
install_folder
$pwnWindowsHealth.exe
aes.plain
Targets
-
- Target 4gaiinqjchiisfg7.exe
- Size 76KB
- SHA256 5ea8636c8c90fa1f36b6f40df3a37ec9b3873317f18545e48ad567de14e5784f
- MD5 a1db5d0b44dc94c7dde791d902a86d8e
- SHA1 9595e5b2f6be103bc668863f43dd3a2a380b5a28
- SHA512 132b6ae1a032c895bfafd1f4fa204ddd15f7cc313c71715d511dee3202dfda6c4cf1ea919230681731f5f745c24b05838a1088a2c99d3b986e6473c3471dbc27
- SSDEEP 1536:tq60OoD4p6hcqe4UVCJe0GkfAHSnWzVbHIlX2Y29fM03alKVxF+:tx0OM4l4U4oyWzVbHKX2n9F+K3Q
- TLSH T189735C447BE8802AF2BE4BB4DCF362054575F5636A22D75E0DD411E90A62FC1EA036FE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall