Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    44e5d3a0cb17677a8fe7827e3d56723380dd12612359125c61266b99ed2f1903.exe

  • Size

    45KB

  • Sample

    231009-f6knsaaf6v

  • MD5

    8d9d38976b83cb8938fffd7ae75f5f5b

  • SHA1

    146249504fe6ccba72e848ca933cf0874ee85346

  • SHA256

    44e5d3a0cb17677a8fe7827e3d56723380dd12612359125c61266b99ed2f1903

  • SHA512

    7e77dc6892e53d6fad10e9faf98d6fe0c087d36702765bda8c8e6719c1a5740b68e3ad610bc3f86a9e38284ccafbd54f58833efbe688ebed66360529e7dcf485

  • SSDEEP

    768:Eu/6ZTgoiziWUUM9rmo2qrb1C3cgyPIIzjbfgX3iPK1JzleRBDZTx:Eu/6ZTgle20tgbI3boXSQNlevdTx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

bestsuccess.ddns.net:2442

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      44e5d3a0cb17677a8fe7827e3d56723380dd12612359125c61266b99ed2f1903.exe

    • Size

      45KB

    • MD5

      8d9d38976b83cb8938fffd7ae75f5f5b

    • SHA1

      146249504fe6ccba72e848ca933cf0874ee85346

    • SHA256

      44e5d3a0cb17677a8fe7827e3d56723380dd12612359125c61266b99ed2f1903

    • SHA512

      7e77dc6892e53d6fad10e9faf98d6fe0c087d36702765bda8c8e6719c1a5740b68e3ad610bc3f86a9e38284ccafbd54f58833efbe688ebed66360529e7dcf485

    • SSDEEP

      768:Eu/6ZTgoiziWUUM9rmo2qrb1C3cgyPIIzjbfgX3iPK1JzleRBDZTx:Eu/6ZTgle20tgbI3boXSQNlevdTx

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks