Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
creative sound blaster.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
creative sound blaster.exe
Resource
win10v2004-20240709-en
General
-
Target
creative sound blaster.exe
-
Size
272KB
-
MD5
216065e5d553615d2eb0b6cfe500955d
-
SHA1
77e8aa8c51aff504fa2570b802a2cfcefc4cbeb9
-
SHA256
8583a10e3990a1a9f00e443c1d39351c69899cff0a902c83e673d233a1467662
-
SHA512
ec5d0edc7d73337445d235b377e8556dd0ac608eaf641e4e711cec28c69fbcd18b239a05843d07f1cadd87ae7b0cb2f69ada5e6de4433a4d7f1c4971eb1b6a7e
-
SSDEEP
3072:cUTcxw+1uSPMV7b3SH1bnf8QYy9ckYMmlB/v6A80XH3e55EVu9cBY:cluSPMV7biVbEq5YM6VyA80XHbUe
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
147.185.221.21:6643
ilfsqckarqvfvoxlq
-
delay
1
-
install
true
-
install_file
dllhost.dat.exe
-
install_folder
%AppData%
Signatures
Files
-
creative sound blaster.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ