Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Infected.exe
-
Size
209KB
-
Sample
230630-hzhxqagd58
-
MD5
7b009164d0eedb682716bb6c97d97603
-
SHA1
8e94ab5ad0ff41ba02b10095bd3ea9f06c0a3035
-
SHA256
940942b06d32a3f72fe1d6d8bb0885d4412de9ecee1d76a40a43ee4961ce52f1
-
SHA512
cb8e6620bdd52ce49b689e73fdd8e1d8b9273fc307c6a2df49fe3666a410581b5b65db6268cc0f70c61923381255d9617d7c314ce437d9f89d8a4d67dbf5b513
-
SSDEEP
3072:dTHYYUbdq3hLKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEc6iZjC:6LbXfJXnIZOr
Malware Config
Extracted
asyncrat
Default
209.205.141.181:39858
Fv杰tgקbaIOvCΗרק5ΘM7杰LF
-
delay
8
-
install
true
-
install_file
revitool.exe
-
install_folder
%AppData%
Targets
-
-
Target
Infected.exe
-
Size
209KB
-
MD5
7b009164d0eedb682716bb6c97d97603
-
SHA1
8e94ab5ad0ff41ba02b10095bd3ea9f06c0a3035
-
SHA256
940942b06d32a3f72fe1d6d8bb0885d4412de9ecee1d76a40a43ee4961ce52f1
-
SHA512
cb8e6620bdd52ce49b689e73fdd8e1d8b9273fc307c6a2df49fe3666a410581b5b65db6268cc0f70c61923381255d9617d7c314ce437d9f89d8a4d67dbf5b513
-
SSDEEP
3072:dTHYYUbdq3hLKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEc6iZjC:6LbXfJXnIZOr
-
Async RAT payload
-
Executes dropped EXE
-