Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    73aa0fa3a9f86a2551fa7d06493ecc1becc8fda30db0685eb4cacdf3ce2930c3N.exe

  • Size

    1.7MB

  • Sample

    241203-l11eyazqbs

  • MD5

    45202c1ec5edd2875a74e0da4e6d1f90

  • SHA1

    7794105222c76e205a0e2196b03a083000de061c

  • SHA256

    73aa0fa3a9f86a2551fa7d06493ecc1becc8fda30db0685eb4cacdf3ce2930c3

  • SHA512

    f1a5ed2e3760b6eace1b01c79a3b731fbc7ee26a861deb4bc5d392d4467b200418d3146145b36b3700f3dda0b4ce425744577e2c507732eadfe77dc4fd6c510b

  • SSDEEP

    24576:eATKuetagT4lr9DtM8YHQBa56e0/ihJPD0+JXx/YtYBvtPzB2fieINXld/rcG/X:e+KNzCa56eOihBZiYB1/NXl5rc

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

143.198.82.194:8808

Mutex

wfi0IhSI9Rqa

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      73aa0fa3a9f86a2551fa7d06493ecc1becc8fda30db0685eb4cacdf3ce2930c3N.exe

    • Size

      1.7MB

    • MD5

      45202c1ec5edd2875a74e0da4e6d1f90

    • SHA1

      7794105222c76e205a0e2196b03a083000de061c

    • SHA256

      73aa0fa3a9f86a2551fa7d06493ecc1becc8fda30db0685eb4cacdf3ce2930c3

    • SHA512

      f1a5ed2e3760b6eace1b01c79a3b731fbc7ee26a861deb4bc5d392d4467b200418d3146145b36b3700f3dda0b4ce425744577e2c507732eadfe77dc4fd6c510b

    • SSDEEP

      24576:eATKuetagT4lr9DtM8YHQBa56e0/ihJPD0+JXx/YtYBvtPzB2fieINXld/rcG/X:e+KNzCa56eOihBZiYB1/NXl5rc

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Async RAT payload

MITRE ATT&CK Enterprise v15

Tasks