Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
21/09/2022, 13:26 UTC
General
-
Target
0a0126d1c300eec86dcc48f7c7de178f.exe
-
Size
45KB
-
MD5
0a0126d1c300eec86dcc48f7c7de178f
-
SHA1
37f40d34a7f000443a1808fa9d488854b4b60c55
-
SHA256
a3c7da959f6fa631a57737164216c12b8b780dcafbb74911c949ac39bcd4e75e
-
SHA512
c74cf1d9839f72ba2b3400c7a945d2871874708318693326150b8431fd7896bf824e4c3fd6f1bb32a30fcddd5f6f95e1dbcff538ecbbebbeacbdf79fa29f886b
-
SSDEEP
768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3i4OtMEb51XRBDZSx:vuwCfTgp/2OKYDy3bCXSrvdSx
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
127.0.0.1:6606
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
1
bxM8UbkfKveUYIInsi8xvCw3Xftmpz3v
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers.
-
Async RAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a0126d1c300eec86dcc48f7c7de178f.exe"C:\Users\Admin\AppData\Local\Temp\0a0126d1c300eec86dcc48f7c7de178f.exe"1⤵
Network
- No results found
-
127.0.0.1:6606 -
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
-
127.0.0.1:6606
No results found
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
8KB