Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
DOC_20221012_094045716_stripped.scr.exe
-
Size
105KB
-
Sample
221015-mtds2afebm
-
MD5
640cc9bb769a9591c548cc63a15d15bf
-
SHA1
56e456d997ef4f2735b7ba48a3b0e4861327ed61
-
SHA256
ef1cddd57724a667599eb57a77aedde1f256853f54698a68a610c3d54f924f1e
-
SHA512
9e05ca442fae59a54d25fced3a156cd7eb00ba4a0ec80e69468a06639b558ee34c6c6509815eb9a10e6f833d34d48832f073fa7c0f4075ee8da16283d0a58d06
-
SSDEEP
3072:M+rR+Y6VgvQdJK0vtNZg/V7S+O+dvvAun:M+BFI3vtNZNH+dv
Static task
static1
Behavioral task
behavioral1
Sample
DOC_20221012_094045716_stripped.scr.exe
Resource
win7-20220812-en
Malware Config
Extracted
asyncrat
0.5.7B
Oct 11
donzola.duckdns.org:2000
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
DOC_20221012_094045716_stripped.scr.exe
-
Size
105KB
-
MD5
640cc9bb769a9591c548cc63a15d15bf
-
SHA1
56e456d997ef4f2735b7ba48a3b0e4861327ed61
-
SHA256
ef1cddd57724a667599eb57a77aedde1f256853f54698a68a610c3d54f924f1e
-
SHA512
9e05ca442fae59a54d25fced3a156cd7eb00ba4a0ec80e69468a06639b558ee34c6c6509815eb9a10e6f833d34d48832f073fa7c0f4075ee8da16283d0a58d06
-
SSDEEP
3072:M+rR+Y6VgvQdJK0vtNZg/V7S+O+dvvAun:M+BFI3vtNZNH+dv
-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-