Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6d655a926287da602b8d5c67ab2de586b9657774599b515b2073852225f4071b

  • Size

    51KB

  • Sample

    240907-2emjys1epg

  • MD5

    907847de5466edadc2b4aa27a6fb48f9

  • SHA1

    1795a9f03a516eaba5a2106aa33328bfbd022db9

  • SHA256

    6d655a926287da602b8d5c67ab2de586b9657774599b515b2073852225f4071b

  • SHA512

    62c3fdb8055b488c438c0bb71b4249b2fac977e83fbbdf48738f2ec5a75909a2bf8a0d4dc7af4fabb31e158a4824613c7e7b9f9cf8d7f5b9224681b1cbce1285

  • SSDEEP

    1536:1u42BT3Nj2d5a58fbn5VKEl8uCdOdlD4x:1u4mT3Nj2d5a5kbn5iwv4x

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

192.168.1.9:1604

Mutex

KXBPA4yBBLiO

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6d655a926287da602b8d5c67ab2de586b9657774599b515b2073852225f4071b

    • Size

      51KB

    • MD5

      907847de5466edadc2b4aa27a6fb48f9

    • SHA1

      1795a9f03a516eaba5a2106aa33328bfbd022db9

    • SHA256

      6d655a926287da602b8d5c67ab2de586b9657774599b515b2073852225f4071b

    • SHA512

      62c3fdb8055b488c438c0bb71b4249b2fac977e83fbbdf48738f2ec5a75909a2bf8a0d4dc7af4fabb31e158a4824613c7e7b9f9cf8d7f5b9224681b1cbce1285

    • SSDEEP

      1536:1u42BT3Nj2d5a58fbn5VKEl8uCdOdlD4x:1u4mT3Nj2d5a5kbn5iwv4x

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

MITRE ATT&CK Enterprise v15

Tasks