Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Loader.exe

  • Size

    47KB

  • MD5

    222749341749d92397472025c0350961

  • SHA1

    183a40710a7e96e8b69477db45ecabcfe9df7a2d

  • SHA256

    eb3be957f0a8e1f2fd544608a90b4c4a5b22f34c6e5ae5bc0342d35de0701a14

  • SHA512

    cb16d19e0fc4edc157506ebc97d265a526ecec52a482050679c80d5fbb36a41ce0eb332c444a3fea0242093d93ad51e7be9004d64569e6e06b54fbc2d317b5ae

  • SSDEEP

    768:CUIOFSkk0SmipFUpEadqxM3qi/Bwcv/TfT/PP1IBLbEdia9DbOiU0a/fcgCbMf+:CUh49cvbT/P4bEca9TUL0gCbMf+

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

stuff-data.gl.at.ply.gg:54296

Mutex

u81wDUVoFHib

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain
1
zGrpaFvdSJVVFopMOpkZxbOV0ArHRJP5

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.