Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
RFQ# 6000163267.IMG.exe
-
Size
969KB
-
Sample
230508-ttm52adc8x
-
MD5
57e2bc8139286c9c5e8b34efe9f3a762
-
SHA1
37ee61c9ddc1f81ae024ad465eaa6a745c07dbf3
-
SHA256
e33ad76851f23305a18b0db3a98c45280c581505da95f701e265a8479713c3ff
-
SHA512
0a9c79a4091bd52ce1fe137fd48349bd10620b5a68392226ba732af7fa4e7d4ab0b5f2790d1b4cac472c4752be9ad138056b86c9b394bf6720a20d04a2b345f3
-
SSDEEP
12288:s4mT/RcXtvyJdBQhXVQppDv4alnZqby13caYgd2DHs:s4C/6XtvWBmQppTggcaYgd0
Static task
static1
Behavioral task
behavioral1
Sample
RFQ# 6000163267.IMG.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ# 6000163267.IMG.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
209.90.234.22:6606
209.90.234.22:7707
209.90.234.22:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
RFQ# 6000163267.IMG.exe
-
Size
969KB
-
MD5
57e2bc8139286c9c5e8b34efe9f3a762
-
SHA1
37ee61c9ddc1f81ae024ad465eaa6a745c07dbf3
-
SHA256
e33ad76851f23305a18b0db3a98c45280c581505da95f701e265a8479713c3ff
-
SHA512
0a9c79a4091bd52ce1fe137fd48349bd10620b5a68392226ba732af7fa4e7d4ab0b5f2790d1b4cac472c4752be9ad138056b86c9b394bf6720a20d04a2b345f3
-
SSDEEP
12288:s4mT/RcXtvyJdBQhXVQppDv4alnZqby13caYgd2DHs:s4C/6XtvWBmQppTggcaYgd0
-
Async RAT payload
-