thichchich.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dd43ab35cbdde1b22c861fab7b5fecfa1336341dda2a1fb7e52a5ca378580420
-
Async RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Behavioral task
behavioral1
Sample
thichchich.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
thichchich.exe
Resource
win11ltsc2024-20260709-en
asyncrat
0.5.8
Default
j8jy8.co/vi-vn/:6606
j8jy8.co/vi-vn/:80
j8jy8.co/vi-vn/:8080
j8jy8.co/vi-vn/:443
j8jy8.co/vi-vn/:8443
j8jy8.co/vi-vn/:22
j8jy8.co/vi-vn/:23
01cb01.me/vi-vn/:6606
01cb01.me/vi-vn/:80
01cb01.me/vi-vn/:8080
01cb01.me/vi-vn/:443
01cb01.me/vi-vn/:8443
01cb01.me/vi-vn/:22
01cb01.me/vi-vn/:23
macsy.nl/vi-vn/:6606
macsy.nl/vi-vn/:80
macsy.nl/vi-vn/:8080
macsy.nl/vi-vn/:443
macsy.nl/vi-vn/:8443
macsy.nl/vi-vn/:22
macsy.nl/vi-vn/:23
8jok.pw/vi-vn/:6606
8jok.pw/vi-vn/:80
8jok.pw/vi-vn/:8080
8jok.pw/vi-vn/:443
8jok.pw/vi-vn/:8443
8jok.pw/vi-vn/:22
8jok.pw/vi-vn/:23
qs888vip.com/vi-vn/:6606
qs888vip.com/vi-vn/:80
qs888vip.com/vi-vn/:8080
qs888vip.com/vi-vn/:443
qs888vip.com/vi-vn/:8443
qs888vip.com/vi-vn/:22
qs888vip.com/vi-vn/:23
arniseko.info/vi-vn/:6606
arniseko.info/vi-vn/:80
arniseko.info/vi-vn/:8080
arniseko.info/vi-vn/:443
arniseko.info/vi-vn/:8443
arniseko.info/vi-vn/:22
arniseko.info/vi-vn/:23
disvetsi.mx/vi-vn/:6606
disvetsi.mx/vi-vn/:80
disvetsi.mx/vi-vn/:8080
disvetsi.mx/vi-vn/:443
disvetsi.mx/vi-vn/:8443
disvetsi.mx/vi-vn/:22
disvetsi.mx/vi-vn/:23
pdmt.in/vi-vn/:6606
pdmt.in/vi-vn/:80
pdmt.in/vi-vn/:8080
pdmt.in/vi-vn/:443
pdmt.in/vi-vn/:8443
pdmt.in/vi-vn/:22
pdmt.in/vi-vn/:23
789win.proficientbookpublishers.co/vn/:6606
789win.proficientbookpublishers.co/vn/:80
789win.proficientbookpublishers.co/vn/:8080
789win.proficientbookpublishers.co/vn/:443
789win.proficientbookpublishers.co/vn/:8443
789win.proficientbookpublishers.co/vn/:22
789win.proficientbookpublishers.co/vn/:23
proficientbookpublishers.co/vn/:6606
proficientbookpublishers.co/vn/:80
proficientbookpublishers.co/vn/:8080
proficientbookpublishers.co/vn/:443
proficientbookpublishers.co/vn/:8443
proficientbookpublishers.co/vn/:22
proficientbookpublishers.co/vn/:23
789win01.cyou/vi-vn/:6606
789win01.cyou/vi-vn/:80
789win01.cyou/vi-vn/:8080
789win01.cyou/vi-vn/:443
789win01.cyou/vi-vn/:8443
789win01.cyou/vi-vn/:22
789win01.cyou/vi-vn/:23
789winvip.us/vi-vn/:6606
789winvip.us/vi-vn/:80
789winvip.us/vi-vn/:8080
789winvip.us/vi-vn/:443
789winvip.us/vi-vn/:8443
789winvip.us/vi-vn/:22
789winvip.us/vi-vn/:23
789winbett.pro/vi-vn/:6606
789winbett.pro/vi-vn/:80
789winbett.pro/vi-vn/:8080
789winbett.pro/vi-vn/:443
789winbett.pro/vi-vn/:8443
789winbett.pro/vi-vn/:22
789winbett.pro/vi-vn/:23
riobet-www.top/vi-vn/:6606
riobet-www.top/vi-vn/:80
riobet-www.top/vi-vn/:8080
riobet-www.top/vi-vn/:443
riobet-www.top/vi-vn/:8443
riobet-www.top/vi-vn/:22
riobet-www.top/vi-vn/:23
riobet-top.top/vi-vn/:6606
riobet-top.top/vi-vn/:80
riobet-top.top/vi-vn/:8080
riobet-top.top/vi-vn/:443
riobet-top.top/vi-vn/:8443
riobet-top.top/vi-vn/:22
riobet-top.top/vi-vn/:23
sherari.nl/vi-vn/:6606
sherari.nl/vi-vn/:80
sherari.nl/vi-vn/:8080
sherari.nl/vi-vn/:443
sherari.nl/vi-vn/:8443
sherari.nl/vi-vn/:22
sherari.nl/vi-vn/:23
playerassublimadas.com.mx/vi-vn/:6606
playerassublimadas.com.mx/vi-vn/:80
playerassublimadas.com.mx/vi-vn/:8080
playerassublimadas.com.mx/vi-vn/:443
playerassublimadas.com.mx/vi-vn/:8443
playerassublimadas.com.mx/vi-vn/:22
playerassublimadas.com.mx/vi-vn/:23
versenvleesboerderijschreurs.nl/vi-vn/:6606
versenvleesboerderijschreurs.nl/vi-vn/:80
versenvleesboerderijschreurs.nl/vi-vn/:8080
versenvleesboerderijschreurs.nl/vi-vn/:443
versenvleesboerderijschreurs.nl/vi-vn/:8443
versenvleesboerderijschreurs.nl/vi-vn/:22
versenvleesboerderijschreurs.nl/vi-vn/:23
nk88.royalgroupofcompanies.in/vn/:6606
nk88.royalgroupofcompanies.in/vn/:80
nk88.royalgroupofcompanies.in/vn/:8080
nk88.royalgroupofcompanies.in/vn/:443
nk88.royalgroupofcompanies.in/vn/:8443
nk88.royalgroupofcompanies.in/vn/:22
nk88.royalgroupofcompanies.in/vn/:23
royalgroupofcompanies.in/vn/:6606
royalgroupofcompanies.in/vn/:80
royalgroupofcompanies.in/vn/:8080
royalgroupofcompanies.in/vn/:443
royalgroupofcompanies.in/vn/:8443
royalgroupofcompanies.in/vn/:22
royalgroupofcompanies.in/vn/:23
g2mcol.co/vi-vn/:6606
g2mcol.co/vi-vn/:80
g2mcol.co/vi-vn/:8080
g2mcol.co/vi-vn/:443
g2mcol.co/vi-vn/:8443
g2mcol.co/vi-vn/:22
g2mcol.co/vi-vn/:23
kenzastyle.in/vi-vn/:6606
kenzastyle.in/vi-vn/:80
kenzastyle.in/vi-vn/:8080
kenzastyle.in/vi-vn/:443
kenzastyle.in/vi-vn/:8443
kenzastyle.in/vi-vn/:22
kenzastyle.in/vi-vn/:23
idn33slot.com/vi-vn/:6606
idn33slot.com/vi-vn/:80
idn33slot.com/vi-vn/:8080
idn33slot.com/vi-vn/:443
idn33slot.com/vi-vn/:8443
idn33slot.com/vi-vn/:22
idn33slot.com/vi-vn/:23
drivingschoolwebsites.co/vi-vn/:6606
drivingschoolwebsites.co/vi-vn/:80
drivingschoolwebsites.co/vi-vn/:8080
drivingschoolwebsites.co/vi-vn/:443
drivingschoolwebsites.co/vi-vn/:8443
drivingschoolwebsites.co/vi-vn/:22
drivingschoolwebsites.co/vi-vn/:23
ZtH9q7ikZmiF
3
true
GoogleUpdate.exe
%AppData%
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.