Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    86cab8d49fd38362415c87b644d4ddab.bin

  • Size

    28KB

  • Sample

    240505-bvjvwsac7z

  • MD5

    59dfbbbdab4c73a86b7240d7148859f5

  • SHA1

    5b01f0f6cf1b1897573ab146fdc34334ef3c1be6

  • SHA256

    06b4302ff043da55466dd9dc6f656e0486ccd6b14fb11b62ba0fa6c9c837c285

  • SHA512

    d3d09769e74e54001780de96a8110b1444aebc2ece0b1437a13b6606e2e4b1e2c1fd5146fb4c7e143c1d4c48166fe2a9d7f451f9a9c744df258f5bef222a2aad

  • SSDEEP

    768:kFV/NyguPmr+RTD8QBA63UM6Bv0WW6a1/PtwWHR:9gHr+dNbtWWvt7x

Malware Config

Extracted

Family

asyncrat

Version

AsyncRAT

Botnet

RbxFps

C2

eve.now-dns.net:313

Mutex

AsyncMutex_raw

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      64f373211953aa5e294e9d7dee8dee07866ceb7fa944f8c5845792489433afb6.exe

    • Size

      61KB

    • MD5

      86cab8d49fd38362415c87b644d4ddab

    • SHA1

      f08be955c6fa6b3a1f36693233214f3d63b63cfb

    • SHA256

      64f373211953aa5e294e9d7dee8dee07866ceb7fa944f8c5845792489433afb6

    • SHA512

      1774a3eddf1f6727033bfafdb99e26ba2c34aa4b1ff8325788035504c8f7e820c86fbe37123e3d38158f6d2657094d68b3f1c0dc5c9833ab1162a6392c60ac57

    • SSDEEP

      1536:z+OAXoaIibUaSTt1oib85QgI55xnBoTKqq3Wfx:z+OAXoaIibit1oib8y55xMKF36x

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks