Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

06d3542e57...18.exe

windows7-x64

10

06d3542e57...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06d3542e576cada63ced6c15f1166a0d_JaffaCakes118

  • Size

    287KB

  • Sample

    240328-qthzjafc8z

  • MD5

    06d3542e576cada63ced6c15f1166a0d

  • SHA1

    a1b1685144d458580c813ca134e5a1843ecf934f

  • SHA256

    43dbc039265a6a588f857a1847c19e431d241a6aa3824fca12ac16ecefcd0bfd

  • SHA512

    898133326ff46d04053b8e8499b97ae1b0d7301c0be5a6c3b8f3e24efbfb40d7339bfc7bb1a4bad18a54f73e088ab38a6b827fe31a933ee74def089d948e4e81

  • SSDEEP

    6144:eDO9b3gGtcsm3K4msOho0oS+PKYTfpmdIGiJ3EpxqlYXMu5S0Ka:eDOxgGaXa4/O7oS+PKcW/qCX/Ka

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

185.222.57.71:00783

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      06d3542e576cada63ced6c15f1166a0d_JaffaCakes118

    • Size

      287KB

    • MD5

      06d3542e576cada63ced6c15f1166a0d

    • SHA1

      a1b1685144d458580c813ca134e5a1843ecf934f

    • SHA256

      43dbc039265a6a588f857a1847c19e431d241a6aa3824fca12ac16ecefcd0bfd

    • SHA512

      898133326ff46d04053b8e8499b97ae1b0d7301c0be5a6c3b8f3e24efbfb40d7339bfc7bb1a4bad18a54f73e088ab38a6b827fe31a933ee74def089d948e4e81

    • SSDEEP

      6144:eDO9b3gGtcsm3K4msOho0oS+PKYTfpmdIGiJ3EpxqlYXMu5S0Ka:eDOxgGaXa4/O7oS+PKcW/qCX/Ka

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks