Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
54c8f9450de555446717778304d80f8897f249ac612cebf6d4d939334d95e6f4
-
Size
74KB
-
Sample
240818-xdmq4syakb
-
MD5
576589c04e1be32a1bfc12c9a3632e0b
-
SHA1
77e636cee6dfddbf4bfc51d1c10e4ca11c96384a
-
SHA256
54c8f9450de555446717778304d80f8897f249ac612cebf6d4d939334d95e6f4
-
SHA512
007340d9d4702ec503e95c57b55c64e11d8b84bb0e2c3d72c2eb11706afe39ce4783d096584801bc554696ef975cf884eaf21a1c0bd0188b1184f548128033b1
-
SSDEEP
1536:2UvNwcxKHXwzCtmPMVP4ef0qHIFH1bW/WXx9QzcqLVclN:2UvicxK8WmPMVP4ecH1bWu3QbBY
Behavioral task
behavioral1
Sample
54c8f9450de555446717778304d80f8897f249ac612cebf6d4d939334d95e6f4.exe
Resource
win7-20240704-en
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
deneme
127.0.0.1:4449
127.0.0.1:1604
gsekihlnjqbrzdniobl
-
delay
1
-
install
true
-
install_file
deneme.exe
-
install_folder
%AppData%
Targets
-
-
Target
54c8f9450de555446717778304d80f8897f249ac612cebf6d4d939334d95e6f4
-
Size
74KB
-
MD5
576589c04e1be32a1bfc12c9a3632e0b
-
SHA1
77e636cee6dfddbf4bfc51d1c10e4ca11c96384a
-
SHA256
54c8f9450de555446717778304d80f8897f249ac612cebf6d4d939334d95e6f4
-
SHA512
007340d9d4702ec503e95c57b55c64e11d8b84bb0e2c3d72c2eb11706afe39ce4783d096584801bc554696ef975cf884eaf21a1c0bd0188b1184f548128033b1
-
SSDEEP
1536:2UvNwcxKHXwzCtmPMVP4ef0qHIFH1bW/WXx9QzcqLVclN:2UvicxK8WmPMVP4ecH1bWu3QbBY
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-