Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe
-
Size
2.3MB
-
Sample
240308-y5ckwsfd47
-
MD5
e9fdcd87b918a3f48a285d4c24de302a
-
SHA1
6a4f3b2bb64269a531b3e8aca974f6350daeddb0
-
SHA256
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe
-
SHA512
04c3748f9879c2c3900eebe14fad3060dd372ea33ffed525d37bf4b4e978d65aa8f7eabef3bf25fc98c1603039ea010ae58618d04ac21c988513754fe5ef9096
-
SSDEEP
49152:Zi39+084E6W4W8+m/os49aXZmMA8zUYTDTy1be1rFFv:Y+HVb4W8bx49unD/Oe1b
Static task
static1
Behavioral task
behavioral1
Sample
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
asyncrat
Default
1.err.line.pm:4449
glzznzesxsoyn
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe
-
Size
2.3MB
-
MD5
e9fdcd87b918a3f48a285d4c24de302a
-
SHA1
6a4f3b2bb64269a531b3e8aca974f6350daeddb0
-
SHA256
d0028f62c1734d9bda0763bde36e31b784cbaa0944595b5300bd6e43c4f168fe
-
SHA512
04c3748f9879c2c3900eebe14fad3060dd372ea33ffed525d37bf4b4e978d65aa8f7eabef3bf25fc98c1603039ea010ae58618d04ac21c988513754fe5ef9096
-
SSDEEP
49152:Zi39+084E6W4W8+m/os49aXZmMA8zUYTDTy1be1rFFv:Y+HVb4W8bx49unD/Oe1b
Score10/10-
Async RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-