Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Toolz (astro).zip

  • Size

    139.3MB

  • MD5

    89a0981199604f671771b557e0f74696

  • SHA1

    2f9490600208f17cdb65c051da5b6f8ac3d2c4c8

  • SHA256

    1a649a20bf9dd6b577ed3051786b97e41e82270d784b2dd4e51a8e952510773f

  • SHA512

    1ccd949e85aea2b32103efa4a39aa16a95c32dde3451ec1459ca655175cb43091c6ea55283debb79360cd18bbbacd365b67f31a456d74a0be4c470a922d23df8

  • SSDEEP

    3145728:5ZparHZgZR/+0kZSi9vTwOgTbt+J7y+rL58Nj6m+ctQ+xhZJZSrIO1iyH:FoGZp+0kEOgTIJ7y+rL5oxaNH

Score
10/10

Malware Config

Signatures

  • Stealerium family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • Toolz (astro).zip
    .zip

    Password: @ReverseEngineeringLab

  • Toolz (astro)/888 Rat v1.2.6.7z
    .7z

    Password: @ReverseEngineeringLab

  • 888 Rat v1.2.6/888 Rat v1.2.6.exe
    .exe windows:5 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    c4540f421523fe2dc591e50be5ad7d0b


    Headers

    Imports

    Sections

  • Toolz (astro)/Anarchy Panel 4.7.7z
    .7z

    Password: @ReverseEngineeringLab

  • Anarchy Panel.exe
    .exe windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Anarchy Panel.exe.config
    .xml
  • Plugins/0guo3zbo66fqoG.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/59Zp7paEHDF7luJ.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/CjETR6GpGXqM.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/EVa7gBMKoaHmLC.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FBSyChwp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/G3nl0mDcABnDuZ.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/KNTmoSnG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/PK0TcnqTGFagQTS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RssCnLKcGRxj.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/WkUP83aP9CABpi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/eMTYbTz0gueNs4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/fzAgyDYa.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/mGWHaG2Jn.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/mML6WKMqdxjDGA.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/oYsKwDG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/rNXXgmX25s.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/sJ88z8tsg5XzK.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/yL9x34D8X3oO2P.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/zVvPGvK64uLS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/zVvPGvK64uLS1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Toolz (astro)/Borat.7z
    .7z
  • Toolz (astro)/DarkVision Rat.7z
    .7z
  • Toolz (astro)/LOIC_2.9.9.99 2.zip
    .zip
  • Toolz (astro)/Netflix checker.7z
    .7z
  • Toolz (astro)/XBinder V2.7z
    .7z
  • __MACOSX/Toolz (astro)/._888 Rat v1.2.6.7z
  • __MACOSX/Toolz (astro)/._Anarchy Panel 4.7.7z
  • __MACOSX/Toolz (astro)/._Borat.7z
  • __MACOSX/Toolz (astro)/._DarkVision Rat.7z
  • __MACOSX/Toolz (astro)/._LOIC_2.9.9.99 2.zip
  • __MACOSX/Toolz (astro)/._Netflix checker.7z
  • __MACOSX/Toolz (astro)/._XBinder V2.7z

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.