Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2056-186-0x00000000003B0000-0x00000000013B0000-memory.dmp
-
Size
16.0MB
-
Sample
240105-p1bncsccan
-
MD5
fb7b38f2684423f1314c4fa799ec8064
-
SHA1
25c7d33ddf8a740c0762b8ede132ae8e2cdc75f7
-
SHA256
cb12d76802796196538dadf88a59286874d16bbc592ea0cb948bdc03f9901ecb
-
SHA512
443dc49c92b3e179f8a5ccc36820144bd06d6a682642c59a3e753e5eb7a0336eed26801cafe546dd56cdacef995fa8e2854fa89eaaec23457cf20030a4e645ee
-
SSDEEP
3072:bpST7JS3xDUKuBg7JBZ3c3nMZPYOoJIvqIeu/i9bdJ2cewTob+Wpw:GJ2dUKFJB5c0XeSi9b7
Behavioral task
behavioral1
Sample
2056-186-0x00000000003B0000-0x00000000013B0000-memory.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2056-186-0x00000000003B0000-0x00000000013B0000-memory.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
asyncrat
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
https://api.telegram.org/bot6889241853:AAHAa8eUBd5h6tWRG0OvgDx7o1_LKQJi-y8/sendMessage?chat_id=6367688286
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
2056-186-0x00000000003B0000-0x00000000013B0000-memory.dmp
-
Size
16.0MB
-
MD5
fb7b38f2684423f1314c4fa799ec8064
-
SHA1
25c7d33ddf8a740c0762b8ede132ae8e2cdc75f7
-
SHA256
cb12d76802796196538dadf88a59286874d16bbc592ea0cb948bdc03f9901ecb
-
SHA512
443dc49c92b3e179f8a5ccc36820144bd06d6a682642c59a3e753e5eb7a0336eed26801cafe546dd56cdacef995fa8e2854fa89eaaec23457cf20030a4e645ee
-
SSDEEP
3072:bpST7JS3xDUKuBg7JBZ3c3nMZPYOoJIvqIeu/i9bdJ2cewTob+Wpw:GJ2dUKFJB5c0XeSi9b7
Score1/10 -