Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d_JC.exe
-
Size
66KB
-
Sample
231011-nj6lqsbg7z
-
MD5
dbdf4dcd5a445b96105a6a5912c8416e
-
SHA1
29bb622030a2dc69903156d4804e900ca6211cf6
-
SHA256
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d
-
SHA512
9372b81ada3bd4bc6c593c9ee23ff358d466c066ecb19f5157160d79ca1c59e523fd551ecb6356e6553127aa98b9f67880cd60c62bf0a1831ddaa5f2fa4c7d1a
-
SSDEEP
1536:ZmImx6tX2kNff4sKu+UYFpGqhsORf9tbfvVb8v9rBeBGrSTGZx:Zm9x6tmkN7Ku+UYFpHpbZb87IGIax
Behavioral task
behavioral1
Sample
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
WSKRRR2024
nsairoet.kozow.com:2033
nsairoet.kozow.com:2034
nsairoet.kozow.com:2035
nsairoet.kozow.com:2022
nsairoet.kozow.com:2023
nsairoet.kozow.com:2024
AsyncMutex_XXX836544
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d_JC.exe
-
Size
66KB
-
MD5
dbdf4dcd5a445b96105a6a5912c8416e
-
SHA1
29bb622030a2dc69903156d4804e900ca6211cf6
-
SHA256
002e8d95c4d009cda92b5708f324a5107c42b7739c5a37b3960b245006170a6d
-
SHA512
9372b81ada3bd4bc6c593c9ee23ff358d466c066ecb19f5157160d79ca1c59e523fd551ecb6356e6553127aa98b9f67880cd60c62bf0a1831ddaa5f2fa4c7d1a
-
SSDEEP
1536:ZmImx6tX2kNff4sKu+UYFpGqhsORf9tbfvVb8v9rBeBGrSTGZx:Zm9x6tmkN7Ku+UYFpHpbZb87IGIax
Score10/10-
Async RAT payload
-