Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    243107799d46411f4a919d7117eef4b5f1718dc997bf9ef316ed822ea93b29e8

  • Size

    74KB

  • MD5

    48865d6cc53e8a2fc637da9f1ee5e353

  • SHA1

    d655c548c01f91438d20f80bd9acab9f94073cef

  • SHA256

    243107799d46411f4a919d7117eef4b5f1718dc997bf9ef316ed822ea93b29e8

  • SHA512

    acd3920bbb859c8e27334977cf7b5ec1bb035c38e1203cf40aea4caf33e4dcf8b3ac5e754d7a63973ec56186f3f2484530e897e58b4da169df34b1e469f78940

  • SSDEEP

    1536:LUk0cxVGlCBiPMVQ0JpsIyb1bu/MIomRQzc+LVclN:LURcxVMWiPMVz/4b1bukIo+QXBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

kjllrkvvfowjke

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/zAGEXn7M

aes.plain
1
jCrUSUmzoPjnNOBwfhtsI0WbxI1MEVZb

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • VenomRAT 1 IoCs

    Detects VenomRAT.

  • Venomrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 243107799d46411f4a919d7117eef4b5f1718dc997bf9ef316ed822ea93b29e8
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.