Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
79ad3b97b133a46650bd4e9243585e619cb2225a05d8dede6d1aa78a6a54bf19.exe
-
Size
194KB
-
Sample
240111-nkzvksffb5
-
MD5
150d0d25b7a369b2b55c7cfbf25a204f
-
SHA1
225b5a35019cd044dc603d9d997c41065283bfc7
-
SHA256
79ad3b97b133a46650bd4e9243585e619cb2225a05d8dede6d1aa78a6a54bf19
-
SHA512
564f39c2a96a0975dd68e75e2398e603c5c5a5b7267c5c53fd83bc8d2326a08c1414ca8fffa311cc8832e0d63a1c5d1cd3a12653b471fe83552e2c641a62189b
-
SSDEEP
3072:4uiJTUKP2zG0K3buTbSHynFYrNm6+xmfswft:4uiR+Ct3beneR+KV
Behavioral task
behavioral1
Sample
79ad3b97b133a46650bd4e9243585e619cb2225a05d8dede6d1aa78a6a54bf19.exe
Resource
win7-20231215-en
Malware Config
Extracted
asyncrat
0.5.8
Default
139.180.171.110:22636
139.180.171.110:1604
RfO8CsTGr0kh
-
delay
3
-
install
true
-
install_file
chrome.exe
-
install_folder
%AppData%
Targets
-
-
Target
79ad3b97b133a46650bd4e9243585e619cb2225a05d8dede6d1aa78a6a54bf19.exe
-
Size
194KB
-
MD5
150d0d25b7a369b2b55c7cfbf25a204f
-
SHA1
225b5a35019cd044dc603d9d997c41065283bfc7
-
SHA256
79ad3b97b133a46650bd4e9243585e619cb2225a05d8dede6d1aa78a6a54bf19
-
SHA512
564f39c2a96a0975dd68e75e2398e603c5c5a5b7267c5c53fd83bc8d2326a08c1414ca8fffa311cc8832e0d63a1c5d1cd3a12653b471fe83552e2c641a62189b
-
SSDEEP
3072:4uiJTUKP2zG0K3buTbSHynFYrNm6+xmfswft:4uiR+Ct3beneR+KV
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-