Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Shellbag anylizer.exe

windows11-21h2-x64

10

Resubmissions

08/08/2024, 08:56 UTC

240808-kv41havgjh 10

08/08/2024, 08:55 UTC

240808-kvncravgjb 10

08/08/2024, 08:48 UTC

240808-kqyypavfpg 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shellbag anylizer.exe

  • Size

    247KB

  • Sample

    240808-kvncravgjb

  • MD5

    851269fc86de5d91e5f2db1b2b34cb6e

  • SHA1

    6103dab45c98bddef65b6eed235a60159d458526

  • SHA256

    0b7987bd9f7cbee60c4c809f22ecda6f314a0366f0704ed474626ac5f7af3521

  • SHA512

    c01c7d2ec52d55ece6f88eeb9c5ecf260ef9b59fd3f08ad42e4ed582b24bd482fcfd334375177b032564f567af6d195f7627249abe1e428f52f6c2806783acfc

  • SSDEEP

    6144:/bwmPMVWrVbVPwF9kfK8rpClz0KBb6o589GHWHWujiSPbp:/bw8n5gBuj/PV

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

zedtklncvg

Attributes
  • delay

    1

  • install

    true

  • install_file

    update.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/f2T8NYnM

aes.plain
1
x4oGkJpeWREYzOWoViETXvuZNe0pe9Gi

Targets

    • Target

      Shellbag anylizer.exe

    • Size

      247KB

    • MD5

      851269fc86de5d91e5f2db1b2b34cb6e

    • SHA1

      6103dab45c98bddef65b6eed235a60159d458526

    • SHA256

      0b7987bd9f7cbee60c4c809f22ecda6f314a0366f0704ed474626ac5f7af3521

    • SHA512

      c01c7d2ec52d55ece6f88eeb9c5ecf260ef9b59fd3f08ad42e4ed582b24bd482fcfd334375177b032564f567af6d195f7627249abe1e428f52f6c2806783acfc

    • SSDEEP

      6144:/bwmPMVWrVbVPwF9kfK8rpClz0KBb6o589GHWHWujiSPbp:/bw8n5gBuj/PV

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.