Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-09-07...ys.exe

windows7-x64

10

2024-09-07...ys.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-07_7d6a9c662d3313b3f858e7402ca13424_icedid_rhadamanthys

  • Size

    1.1MB

  • Sample

    240907-be3caswhkk

  • MD5

    7d6a9c662d3313b3f858e7402ca13424

  • SHA1

    19bb029f7d293be3dff664bf8f8da41ff637b0c2

  • SHA256

    fe4cb814defa8a705926e5bde1958b91dc0bbb55d94e5863cccf131bfb8a1e96

  • SHA512

    b85316df04509bf72885f94eec3dc1c6ac2d47be2bcf6c8d073ebcce118c9342292df9b6f22f31e5730e76f1dea2cee2a601e4b42928a0c662867a50d4627a0e

  • SSDEEP

    24576:pZhTYPY+5ayew4S1HYeE82okDn8J+BHkBS4qwo7I3Bou5vXOeZLWp3iLA:pvkr5a8F5YeEpocn8J+BHkBS4qwo7I3y

Score
10/10
asyncratenviosepdiscoverypersistencerat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

ENVIOSEP

C2

windowsreportservice.duckdns.org:8848

Mutex

VvSKPOa_nkuzuiiJTmshnA

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      2024-09-07_7d6a9c662d3313b3f858e7402ca13424_icedid_rhadamanthys

    • Size

      1.1MB

    • MD5

      7d6a9c662d3313b3f858e7402ca13424

    • SHA1

      19bb029f7d293be3dff664bf8f8da41ff637b0c2

    • SHA256

      fe4cb814defa8a705926e5bde1958b91dc0bbb55d94e5863cccf131bfb8a1e96

    • SHA512

      b85316df04509bf72885f94eec3dc1c6ac2d47be2bcf6c8d073ebcce118c9342292df9b6f22f31e5730e76f1dea2cee2a601e4b42928a0c662867a50d4627a0e

    • SSDEEP

      24576:pZhTYPY+5ayew4S1HYeE82okDn8J+BHkBS4qwo7I3Bou5vXOeZLWp3iLA:pvkr5a8F5YeEpocn8J+BHkBS4qwo7I3y

    Score
    10/10
    asyncratenviosepdiscoverypersistencerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks