General
- Target 2FA Code Engine.exe
- Size 13.1MB
- Sample261016-pgf4qshe79
- SHA256 e27d133c3b29c1a0c0eca19b56dbb1db2f731db5c7b6dd3e7acacfdf49615cd3
- MD5 0d5c47ebc408855d8a71ad321ef1da14
- SHA1 adbe7f96b8dab9160cfc3e0056005c6d5a99ab23
- SHA512 c9550dbda4dd6315e54e2db2f64479b52c11c4a81dabdd82ad61524da0afaee6215a3c117b9b73886d2f4d297121c39816c2c0372581f338b4a6ff4b601c79aa
- SSDEEP 393216:NAJ5hg5KE7QW0ySN/i6GCwPFnx+wsoke+jC2RFt3TM5Kj:iJ5hg5KDW0ySN/i7CJIR2ntTt
- TLSH T137D6CF31768BC12AD16A01F05A2CDEAA922DAD3A0F7146C773FC7D5A56744C3173AE23
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2FA Code Engine.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2FA Code Engine.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Extracted
Family
-
wailsloader
Attributes
-
ddr
https://t.me/+n_A3yiwNZa5kZmRi
Targets
-
- Target 2FA Code Engine.exe
- Size 13.1MB
- SHA256 e27d133c3b29c1a0c0eca19b56dbb1db2f731db5c7b6dd3e7acacfdf49615cd3
- MD5 0d5c47ebc408855d8a71ad321ef1da14
- SHA1 adbe7f96b8dab9160cfc3e0056005c6d5a99ab23
- SHA512 c9550dbda4dd6315e54e2db2f64479b52c11c4a81dabdd82ad61524da0afaee6215a3c117b9b73886d2f4d297121c39816c2c0372581f338b4a6ff4b601c79aa
- SSDEEP 393216:NAJ5hg5KE7QW0ySN/i6GCwPFnx+wsoke+jC2RFt3TM5Kj:iJ5hg5KDW0ySN/i7CJIR2ntTt
- TLSH T137D6CF31768BC12AD16A01F05A2CDEAA922DAD3A0F7146C773FC7D5A56744C3173AE23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects WailsLoader
-
Family: WailsLoader
WailsLoader is a Windows malware loader written in Golang.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.