Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290
-
Size
111KB
-
MD5
081d1441bb23508962fe1b5e35a08aea
-
SHA1
b9e15824cf5523eabcdd9eb6328ebf1793dc81c1
-
SHA256
719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290
-
SHA512
6f6b5aa71ec0b04941fb540d9fd070fdd651c67e9c545cf623f52e1486bdad26ff5b2af3c59df9eaa5cc930b0c5e05f1b3c8c268b6a17d088d2b150d7c355bd4
-
SSDEEP
3072:ZUTcxMmw6PMV2e9VdQsH1bf5oQEA2QtDud7r6GiX8QiQ//fY:Zjw6PMV2aesVbxoZA2eDudr6SEf
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
Default
C2
127.0.0.1:4449
127.0.0.1:8080
193.233.255.79:4449
193.233.255.79:8080
Mutex
53263126231
Attributes
-
delay
1
-
install
true
-
install_file
42165.exe
-
install_folder
%AppData%
aes.plain
1
UQOz1qPf4kSAI6l8LUk7Lh4WOAJyayyV
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
VenomRAT 1 IoCs
Detects VenomRAT.
-
Venomrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
719926d5661d42e41d116bf9d2b864f361c99214da2cd1f67becc2f925953290
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections