Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bGsw.exe

  • Size

    47KB

  • Sample

    221027-w2ly2sdbek

  • MD5

    7f7eae31fd88251f48d55641fe8a9279

  • SHA1

    7d763dff2a1085e16b13d9f3f1badd95cb987b9d

  • SHA256

    49f5ab1d1ac3fc37bc87caebe6566465b04207c015a77070dafa9b2b3d5e7c2a

  • SHA512

    8afdb8a4801cf3609f36fc74096480cd683d351bce85b5155384a1d8d5e417126034df9a645e0d3a361ec64bac8a1228ff4a97c108dd8c46e077978df2183caa

  • SSDEEP

    768:p96mxUTILWCaS+DiMtelDSN+iV08YbygeB29sASYtsvEgK/JnZVc6KN:p96AKWMtKDs4zb1G29rSYOnkJnZVclN

Score
10/10

Malware Config

Targets

    • Target

      bGsw.exe

    • Size

      47KB

    • MD5

      7f7eae31fd88251f48d55641fe8a9279

    • SHA1

      7d763dff2a1085e16b13d9f3f1badd95cb987b9d

    • SHA256

      49f5ab1d1ac3fc37bc87caebe6566465b04207c015a77070dafa9b2b3d5e7c2a

    • SHA512

      8afdb8a4801cf3609f36fc74096480cd683d351bce85b5155384a1d8d5e417126034df9a645e0d3a361ec64bac8a1228ff4a97c108dd8c46e077978df2183caa

    • SSDEEP

      768:p96mxUTILWCaS+DiMtelDSN+iV08YbygeB29sASYtsvEgK/JnZVc6KN:p96AKWMtKDs4zb1G29rSYOnkJnZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks