Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Multi Loader.exe

windows10-ltsc 2021-x64

10

SharpDX.XInput.dll

windows10-ltsc 2021-x64

1

SharpDX.dll

windows10-ltsc 2021-x64

1

Soap.exe

windows10-ltsc 2021-x64

1

XInputChecker.exe

windows10-ltsc 2021-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Valorant Loader.zip

  • Size

    1.6MB

  • MD5

    43204fc2219a2021e9377cc27790b290

  • SHA1

    70be1d3817f179f9b43a5f0d20d12bb98f145a9b

  • SHA256

    f7af6851adae707a4b4fbbefbf94b9d8de40a4be6371678257541310e79c8d48

  • SHA512

    0085c585bbc0a2a5f5772487c54b9dce23ad2e75dd95b9562f1ad61847fff52707113866b22e39330232cc1307f8a54ff6e4db6aac31de608ac70451c8b58448

  • SSDEEP

    49152:tHuQtB5N0ehUA61j93NFpVWCSdNnz7VuUxNe:QQT5Ntl61j93Nlgvg

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:3232

Attributes
  • delay

    1

  • install

    true

  • install_file

    Windows.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Valorant Loader.zip
    .zip
  • Instructions.txt
  • Multi Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SharpDX.XInput.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharpDX.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Soap.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • XInputChecker.deps.json
  • XInputChecker.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • XInputChecker.runtimeconfig.json