Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Blasted.exe

  • Size

    48KB

  • MD5

    61e4a40a2bac67d5607088402fe659a4

  • SHA1

    a2ee09184983f1f5c4d28bd3001ce8e48afc46bc

  • SHA256

    50b886a5ba9ff8d8720f9960c1ac52c992bc0e2ccf11ba2ab955a2a783753613

  • SHA512

    dad9337d06a8d7ab608ab6c77bb00ffed9bd969f5ebbd0e37ad5ca88ca4b5e84b4b197a9f7fb7f171a510500de4dccdd03d45f634ffe757de0a9ce0d80577a66

  • SSDEEP

    768:YUK0ILGCqb+DiP8Pixz9ihiW0zNYbCgeTXRePjD/wreBvEgK/JLZVc6KN:YUpTiSE50zWblqePPznkJLZVclN

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:9567

127.0.0.1:52581

annual-bone.gl.at.ply.gg:9567

annual-bone.gl.at.ply.gg:52581

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    true

  • install_file

    sys.exe

  • install_folder

    %AppData%

aes.plain
1
lvDJK5EgylMXeWY423zmL4F8oDkkoU8e

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Blasted.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.