Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

RFQ# 60001...MG.exe

windows7-x64

10

RFQ# 60001...MG.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ# 6000163267.IMG.exe

  • Size

    969KB

  • Sample

    230508-ttm52adc8x

  • MD5

    57e2bc8139286c9c5e8b34efe9f3a762

  • SHA1

    37ee61c9ddc1f81ae024ad465eaa6a745c07dbf3

  • SHA256

    e33ad76851f23305a18b0db3a98c45280c581505da95f701e265a8479713c3ff

  • SHA512

    0a9c79a4091bd52ce1fe137fd48349bd10620b5a68392226ba732af7fa4e7d4ab0b5f2790d1b4cac472c4752be9ad138056b86c9b394bf6720a20d04a2b345f3

  • SSDEEP

    12288:s4mT/RcXtvyJdBQhXVQppDv4alnZqby13caYgd2DHs:s4C/6XtvWBmQppTggcaYgd0

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

209.90.234.22:6606

209.90.234.22:7707

209.90.234.22:8808
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      RFQ# 6000163267.IMG.exe

    • Size

      969KB

    • MD5

      57e2bc8139286c9c5e8b34efe9f3a762

    • SHA1

      37ee61c9ddc1f81ae024ad465eaa6a745c07dbf3

    • SHA256

      e33ad76851f23305a18b0db3a98c45280c581505da95f701e265a8479713c3ff

    • SHA512

      0a9c79a4091bd52ce1fe137fd48349bd10620b5a68392226ba732af7fa4e7d4ab0b5f2790d1b4cac472c4752be9ad138056b86c9b394bf6720a20d04a2b345f3

    • SSDEEP

      12288:s4mT/RcXtvyJdBQhXVQppDv4alnZqby13caYgd2DHs:s4C/6XtvWBmQppTggcaYgd0

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks