Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    557546923cb7c11be5b3be3449b20e05db90caeb4db1ec121cd91bcc1d45a079

  • Size

    101KB

  • Sample

    240818-xdwn1s1fpp

  • MD5

    16e4639eec14e7d2c92ba2c7f137e8e9

  • SHA1

    389cf8b3b34b45404e6b8942b6ab4bc0026854b8

  • SHA256

    557546923cb7c11be5b3be3449b20e05db90caeb4db1ec121cd91bcc1d45a079

  • SHA512

    0aa6f9ca46b046037fb3277cba0a0487524f8b9c25562f9742fcd25f3931057352e971caa0b1a4a7e1787f38ef45c4d72f0e3d01b9c0e7dcdb773217a6880784

  • SSDEEP

    3072:iUhcxNQ5bPMVme9VdQsH1bfoAQjl9m0EARiBY:io5bPMVmaesVbQAv0Zw

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

192.151.243.230:5629

192.151.243.230:54612

Mutex

vrhlsemyjf

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      557546923cb7c11be5b3be3449b20e05db90caeb4db1ec121cd91bcc1d45a079

    • Size

      101KB

    • MD5

      16e4639eec14e7d2c92ba2c7f137e8e9

    • SHA1

      389cf8b3b34b45404e6b8942b6ab4bc0026854b8

    • SHA256

      557546923cb7c11be5b3be3449b20e05db90caeb4db1ec121cd91bcc1d45a079

    • SHA512

      0aa6f9ca46b046037fb3277cba0a0487524f8b9c25562f9742fcd25f3931057352e971caa0b1a4a7e1787f38ef45c4d72f0e3d01b9c0e7dcdb773217a6880784

    • SSDEEP

      3072:iUhcxNQ5bPMVme9VdQsH1bfoAQjl9m0EARiBY:io5bPMVmaesVbQAv0Zw

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • VenomRAT

      Detects VenomRAT.

MITRE ATT&CK Matrix

Tasks