Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Infected.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Infected.exe

  • Size

    209KB

  • Sample

    230630-hzhxqagd58

  • MD5

    7b009164d0eedb682716bb6c97d97603

  • SHA1

    8e94ab5ad0ff41ba02b10095bd3ea9f06c0a3035

  • SHA256

    940942b06d32a3f72fe1d6d8bb0885d4412de9ecee1d76a40a43ee4961ce52f1

  • SHA512

    cb8e6620bdd52ce49b689e73fdd8e1d8b9273fc307c6a2df49fe3666a410581b5b65db6268cc0f70c61923381255d9617d7c314ce437d9f89d8a4d67dbf5b513

  • SSDEEP

    3072:dTHYYUbdq3hLKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEc6iZjC:6LbXfJXnIZOr

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

209.205.141.181:39858

Mutex

Fv杰tgקbaIOvCΗרק5ΘM7杰LF

Attributes
  • delay

    8

  • install

    true

  • install_file

    revitool.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Infected.exe

    • Size

      209KB

    • MD5

      7b009164d0eedb682716bb6c97d97603

    • SHA1

      8e94ab5ad0ff41ba02b10095bd3ea9f06c0a3035

    • SHA256

      940942b06d32a3f72fe1d6d8bb0885d4412de9ecee1d76a40a43ee4961ce52f1

    • SHA512

      cb8e6620bdd52ce49b689e73fdd8e1d8b9273fc307c6a2df49fe3666a410581b5b65db6268cc0f70c61923381255d9617d7c314ce437d9f89d8a4d67dbf5b513

    • SSDEEP

      3072:dTHYYUbdq3hLKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEc6iZjC:6LbXfJXnIZOr

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks