Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
r132-031Payment.exe
-
Size
369KB
-
Sample
231012-rcm3lafc92
-
MD5
2d21173d46e5ed9795ee28f6900edfbc
-
SHA1
e0e16b8d5932434f0a18e1dbab1c102d818f9700
-
SHA256
4ca7277273f9409593101a4e73211877696ae1bed8fddd28650fdd9877ffd6f0
-
SHA512
c90095702262ac1bac1ed592a3417485e1ef03871a78546722f10dc3f33e4644b06391aaf090f8a4affc43dfe0223ff781699858b14fdcd77d09eff8838d9434
-
SSDEEP
6144:Q1cJnjX2zt02wn7GHNX+oqUXMlC6OK8Yp2sSsXB0mfnUIbj:IcJnCz/wnKHVEUXMlCMWsSIvfVbj
Static task
static1
Behavioral task
behavioral1
Sample
r132-031Payment.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
r132-031Payment.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
bestsuccess.ddns.net:2442
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
r132-031Payment.exe
-
Size
369KB
-
MD5
2d21173d46e5ed9795ee28f6900edfbc
-
SHA1
e0e16b8d5932434f0a18e1dbab1c102d818f9700
-
SHA256
4ca7277273f9409593101a4e73211877696ae1bed8fddd28650fdd9877ffd6f0
-
SHA512
c90095702262ac1bac1ed592a3417485e1ef03871a78546722f10dc3f33e4644b06391aaf090f8a4affc43dfe0223ff781699858b14fdcd77d09eff8838d9434
-
SSDEEP
6144:Q1cJnjX2zt02wn7GHNX+oqUXMlC6OK8Yp2sSsXB0mfnUIbj:IcJnCz/wnKHVEUXMlCMWsSIvfVbj
Score10/10-
Modifies WinLogon for persistence
-
Async RAT payload
-
Suspicious use of SetThreadContext
-