Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Stub.exe

  • Size

    47KB

  • Sample

    231003-kk55tabd22

  • MD5

    6c99b4c4064fe2ba0f3506b6283a16fa

  • SHA1

    08a9c6a87194d88999dddc3689b73bc4923e4e43

  • SHA256

    eb37d95815824d94246220ac0bb63bce4ad8f9b3e821362d2d35867e9b83068c

  • SHA512

    7d113e23bafd432ef8436e38c64ff12198db5b5cb547c02753e52e998a83deedbed36a46e4914f04fd70de76be69c41a440eeeffe903979bf62c5ca6aca93bef

  • SSDEEP

    768:6u/6ZTgoiziWUUM9rmo2qrdkxZLbkxQ86PI+ag0b3M8S5v5FwVhFNXw3tE7bhv8+:6u/6ZTgle2e1xQ8D+Gbc8S50FNAd4dS8

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

AloshWSF5555

C2

microwsfp5555.ddns.net:5555

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Stub.exe

    • Size

      47KB

    • MD5

      6c99b4c4064fe2ba0f3506b6283a16fa

    • SHA1

      08a9c6a87194d88999dddc3689b73bc4923e4e43

    • SHA256

      eb37d95815824d94246220ac0bb63bce4ad8f9b3e821362d2d35867e9b83068c

    • SHA512

      7d113e23bafd432ef8436e38c64ff12198db5b5cb547c02753e52e998a83deedbed36a46e4914f04fd70de76be69c41a440eeeffe903979bf62c5ca6aca93bef

    • SSDEEP

      768:6u/6ZTgoiziWUUM9rmo2qrdkxZLbkxQ86PI+ag0b3M8S5v5FwVhFNXw3tE7bhv8+:6u/6ZTgle2e1xQ8D+Gbc8S50FNAd4dS8

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks