Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6a46b47c7f...27.exe

windows7-x64

10

6a46b47c7f...27.exe

windows10-2004-x64

10

Resubmissions

29/12/2022, 16:15

221229-tqnx6agf9t 6

29/12/2022, 16:01

221229-tgazyadd76 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a46b47c7f4899a35078efa1d1e1dbf946f832cec0b9838d9899b3ef53335027

  • Size

    542KB

  • Sample

    221229-tgazyadd76

  • MD5

    dfd7769ca24e896910aa19936993b79d

  • SHA1

    79aab4f713ce6dbe6e0ea7bfc0f03580fe8be7ed

  • SHA256

    6a46b47c7f4899a35078efa1d1e1dbf946f832cec0b9838d9899b3ef53335027

  • SHA512

    1b17b0d99520863f20b5b7d195984c14d639ff2e22771709a193ed82dad4af85821f2cd4c30bb82c69db8913c9a4b7355fb9adebf4cf941b90a69557aecc6074

  • SSDEEP

    12288:KHxsvGS/ePX+g7R0PJQLAoKy7ce9ahJsMW:WKOS/ePX+Hy7ZIQ

Score
10/10
asyncratdefaultpersistencerat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

infodate.ddns.net:7777

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6a46b47c7f4899a35078efa1d1e1dbf946f832cec0b9838d9899b3ef53335027

    • Size

      542KB

    • MD5

      dfd7769ca24e896910aa19936993b79d

    • SHA1

      79aab4f713ce6dbe6e0ea7bfc0f03580fe8be7ed

    • SHA256

      6a46b47c7f4899a35078efa1d1e1dbf946f832cec0b9838d9899b3ef53335027

    • SHA512

      1b17b0d99520863f20b5b7d195984c14d639ff2e22771709a193ed82dad4af85821f2cd4c30bb82c69db8913c9a4b7355fb9adebf4cf941b90a69557aecc6074

    • SSDEEP

      12288:KHxsvGS/ePX+g7R0PJQLAoKy7ce9ahJsMW:WKOS/ePX+Hy7ZIQ

    Score
    10/10
    asyncratdefaultpersistencerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks