Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

5a46f618eb...f6.ps1

windows7-x64

1

5a46f618eb...f6.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a46f618eb96097cf1ba0cef8d21b4f6

  • Size

    200KB

  • Sample

    231226-hfrqhshda8

  • MD5

    5a46f618eb96097cf1ba0cef8d21b4f6

  • SHA1

    32e8ef3358c42a9b8fec743e6db027e426153343

  • SHA256

    eeadb25a0452957734ff500887bdd77ddfee0f925c58ed81b68ddc8677406315

  • SHA512

    650aebf29c4ad32130ecdf6c7a8df59e90d08acbf346e1f76d55de9c97c798acc3c3d4e5032dcce32eac674d430c1e53372ef65d22a7aa84f8f1ec3618f93305

  • SSDEEP

    3072:0n3FSCub20xXQ3ApL8X/g1o1vZvuAirbd:0n3td3ApMY1muAirbd

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

185.19.85.168:8888

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      5a46f618eb96097cf1ba0cef8d21b4f6

    • Size

      200KB

    • MD5

      5a46f618eb96097cf1ba0cef8d21b4f6

    • SHA1

      32e8ef3358c42a9b8fec743e6db027e426153343

    • SHA256

      eeadb25a0452957734ff500887bdd77ddfee0f925c58ed81b68ddc8677406315

    • SHA512

      650aebf29c4ad32130ecdf6c7a8df59e90d08acbf346e1f76d55de9c97c798acc3c3d4e5032dcce32eac674d430c1e53372ef65d22a7aa84f8f1ec3618f93305

    • SSDEEP

      3072:0n3FSCub20xXQ3ApL8X/g1o1vZvuAirbd:0n3td3ApMY1muAirbd

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Async RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks