Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
34s -
max time network
36s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2024, 16:41
General
-
Target
Client.exe
-
Size
47KB
-
MD5
7d3498a0c909fec11824ea0601b9afd4
-
SHA1
f6d12e6afec3c83b4c88c19a29496f3e7c3bf006
-
SHA256
4037d51424a60d99d20d81930f6028b8a3e78850e9e075b34eee1dddcba9b387
-
SHA512
06a141fb55db98de01f095160b5ac548f64a2e955b7727c9048f3d48ba5b0d9f604cb5cc24eea5d9be6ed5edf5ef40e5915ea8be7061f33c56a6fe8200406664
-
SSDEEP
768:RaIO5VILWCyh+DiWtelDSN+iV08YbygepWIhmGI2vEgK/J/ZVc6KN:RaPNWtKDs4zb1q/wQnkJ/ZVclN
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
Default
C2
127.0.0.1:8848
Mutex
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Asyncrat family
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe 3860 Client.exe