Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    04ef67bb0d1f13768dba586b50dabd98.bin

  • Size

    23KB

  • Sample

    241212-bcy7vsvlcx

  • MD5

    7fdcab6307d0c7b16429434ec912c5e8

  • SHA1

    6e183188985b9d319d590045df103c7e5115dfbb

  • SHA256

    2996c97815640d84fcafd7483d53b27c3f4ac2d118c33b6d012eb7f908ad2ff7

  • SHA512

    43e73a65f51d3dce8ad20ef74260eccf58987eb534eabd6511b24c366a38a7a90399bfd0ba44fb2ff0ddc83d6fde2bb4b37df45ce18b9b7d7f88ed803e858bf8

  • SSDEEP

    384:DhyWm/5xDRw6/+/sYckwsi8o6rX8eGbZMMT2p2HjtA7ajIZNb4uYH9DHTOavPke+:DG/5xDS6/fzsrNfN2HhA7ajojYdDRke+

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Server

C2

dcratwas.duckdns.org:35650

dcratwas.duckdns.org:5999

dcratwas.duckdns.org:46452

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
COqD0MxrpoeFHEIgBJDlanBh7muzgro6

Targets

    • Target

      157c924023fefdb1a919140f91a6906c6a44992491ae317a1864fc2d95a51d4f.exe

    • Size

      47KB

    • MD5

      04ef67bb0d1f13768dba586b50dabd98

    • SHA1

      5e2fff06bc54096137687a259a48c7c594bfc1f3

    • SHA256

      157c924023fefdb1a919140f91a6906c6a44992491ae317a1864fc2d95a51d4f

    • SHA512

      154f64558e360e7a9654ff912986cc941920cc873be4787f8d9209c0c5c7411ad3bb3de27532c5b8e2ea84eeba36f722aadc1fdd427d3dd065f7bfa117d4bcc9

    • SSDEEP

      768:l92mxLiIL1CaS+DiD0jd3gLqRp8AoPiIdYbsgex+y8vEgK/JjZVc6KN:l92APWDGaPAKmbjKx8nkJjZVclN

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.