General
- Target qkb06yd5whclewzv.exe
- Size 79KB
- Sample260811-mta25sdh85
- SHA256 2d34c6f29ab8d179a1508f0907779f20162c5782a4acf31e4da33d88691c89ad
- MD5 6e741e2f5c8a8b7f7b11af9349d88a85
- SHA1 3035e609ebea5d3855a8f87c4c328b5638eab8cc
- SHA512 bdce1c15d93840bf23946e3eac7494ac2b648c309328681981054ff3547746389614bb07f9a7e279e42d18acb33ab373c86ecefbd76a83e0247f7a9d0b95012d
- SSDEEP 1536:oYcdZlJFZqDPMe4UHWXfXJ86yRvkboYsP+guUdA33alCGzF+:oBdZAP14U2vPboYQ+xUw+C+Q
- TLSH T173837D447BFC8168F1FE5B74ADB3120042B5F5236B23D65E1DC5119A0A62BC0AB52BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
qkb06yd5whclewzv.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
false
Mutex
-
g)93@&ncf2*2$231wti%q3$
Attributes
-
delay
0
-
install
false
-
install_file
WindowsHealthService
-
install_folder
$pwnWindowsHealth.exe
aes.plain
Targets
-
- Target qkb06yd5whclewzv.exe
- Size 79KB
- SHA256 2d34c6f29ab8d179a1508f0907779f20162c5782a4acf31e4da33d88691c89ad
- MD5 6e741e2f5c8a8b7f7b11af9349d88a85
- SHA1 3035e609ebea5d3855a8f87c4c328b5638eab8cc
- SHA512 bdce1c15d93840bf23946e3eac7494ac2b648c309328681981054ff3547746389614bb07f9a7e279e42d18acb33ab373c86ecefbd76a83e0247f7a9d0b95012d
- SSDEEP 1536:oYcdZlJFZqDPMe4UHWXfXJ86yRvkboYsP+guUdA33alCGzF+:oBdZAP14U2vPboYQ+xUw+C+Q
- TLSH T173837D447BFC8168F1FE5B74ADB3120042B5F5236B23D65E1DC5119A0A62BC0AB52BFE
- MD5 SHA1 SHA512 SSDEEP TLSH