Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

SolaraBootrapper.exe

windows7-x64

10

SolaraBootrapper.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraBootrapper.exe

  • Size

    64KB

  • Sample

    240710-3rwh3aygrh

  • MD5

    774797464cf5376bb757bbef621f0887

  • SHA1

    4f2e33f1d643487db43c7a9482a2839cb9bc1944

  • SHA256

    6019a752eb6a130c3121fbcc23fe84ea8179374f3ce63e16009cbee672e5c469

  • SHA512

    04d08bdfd52165105afdca03efc46f9a899d9acfc241d7a1b93bdca3becea91f7cd84716863dab60e9bebaad1d2ad243f869bcf20e781a3037be931bbbb6a611

  • SSDEEP

    1536:2mL6HVloCyy5nVwiGfMOw0weB90trw42jU23utLF9pWzn:3L+vyyQi8w0weE9QUHvkn

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

192.168.0.23:6606

192.168.0.23:7707

192.168.0.23:8808
Mutex

Anh14EOLKPzm

Attributes
  • delay

    3

  • install

    false

  • install_file

    SolaraBootstrapper.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      SolaraBootrapper.exe

    • Size

      64KB

    • MD5

      774797464cf5376bb757bbef621f0887

    • SHA1

      4f2e33f1d643487db43c7a9482a2839cb9bc1944

    • SHA256

      6019a752eb6a130c3121fbcc23fe84ea8179374f3ce63e16009cbee672e5c469

    • SHA512

      04d08bdfd52165105afdca03efc46f9a899d9acfc241d7a1b93bdca3becea91f7cd84716863dab60e9bebaad1d2ad243f869bcf20e781a3037be931bbbb6a611

    • SSDEEP

      1536:2mL6HVloCyy5nVwiGfMOw0weB90trw42jU23utLF9pWzn:3L+vyyQi8w0weE9QUHvkn

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks