Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    30bd3a34d381539616ee0f790964a4bf.exe

  • Size

    47KB

  • Sample

    221026-xel6zagfa6

  • MD5

    30bd3a34d381539616ee0f790964a4bf

  • SHA1

    bb5ea5d3284b88658f324f4979bf897daca2595b

  • SHA256

    efc68526906a8aa71785e96b05c236349c02f089b0f538852e17a0fed368bcd4

  • SHA512

    eef72f350d41533ca3e90b80a565184b05b773cfd7ce2ce68499318be8cb1e8f1acc7d40736ca12682bc400877871e5c02a933880f461c235c421f59722af5a3

  • SSDEEP

    768:yuScq5TAYGTqWU8j+zmo2qL5sQZPI7WD0b5vjJUXLWF29BDZUx:yuScq5TA5c2D7Wob5bJUXLWITdUx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

127.0.0.1:51585

20.212.19.59:6606

20.212.19.59:7707

20.212.19.59:8808

20.212.19.59:51585

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
tu0GS5EKilHhKaYq5Ry7kufccOiCsIfS

Targets

    • Target

      30bd3a34d381539616ee0f790964a4bf.exe

    • Size

      47KB

    • MD5

      30bd3a34d381539616ee0f790964a4bf

    • SHA1

      bb5ea5d3284b88658f324f4979bf897daca2595b

    • SHA256

      efc68526906a8aa71785e96b05c236349c02f089b0f538852e17a0fed368bcd4

    • SHA512

      eef72f350d41533ca3e90b80a565184b05b773cfd7ce2ce68499318be8cb1e8f1acc7d40736ca12682bc400877871e5c02a933880f461c235c421f59722af5a3

    • SSDEEP

      768:yuScq5TAYGTqWU8j+zmo2qL5sQZPI7WD0b5vjJUXLWF29BDZUx:yuScq5TA5c2D7Wob5bJUXLWITdUx

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.