Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

924-79-0x0...ry.exe

windows7-x64

924-79-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    924-79-0x0000000000400000-0x0000000000418000-memory.dmp

  • Size

    96KB

  • Sample

    230523-vh2dyshb6s

  • MD5

    6dc9aaeed5233c3adeac24a991afec8f

  • SHA1

    805867a6e2bcb008fd434f43ff124b70a333f2c8

  • SHA256

    ea3c79bfa8189c9888e14ca80e602be397ad7d78d9c6bd5a82b2ed2971c3f4b2

  • SHA512

    e4c67dade3ca3b0b7ebca791ffc5e272b6b9a87f0776d88bd204688da63dc9007bf443c3c8cc0407643deac2fa047fdb43daf495ce4ebc6dd2962c6a8c1564b3

  • SSDEEP

    1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/EtEZ23UQzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfMCokQPBY

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.1

Botnet

Default

C2

151.80.52.38:4449

Mutex

ctbrvrbjbpdrrmujx

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      924-79-0x0000000000400000-0x0000000000418000-memory.dmp

    • Size

      96KB

    • MD5

      6dc9aaeed5233c3adeac24a991afec8f

    • SHA1

      805867a6e2bcb008fd434f43ff124b70a333f2c8

    • SHA256

      ea3c79bfa8189c9888e14ca80e602be397ad7d78d9c6bd5a82b2ed2971c3f4b2

    • SHA512

      e4c67dade3ca3b0b7ebca791ffc5e272b6b9a87f0776d88bd204688da63dc9007bf443c3c8cc0407643deac2fa047fdb43daf495ce4ebc6dd2962c6a8c1564b3

    • SSDEEP

      1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/EtEZ23UQzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfMCokQPBY

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks