Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Client.exe

  • Size

    74KB

  • Sample

    250108-asbaasxqar

  • MD5

    518cefe78569449a64ba9fcc57722fc3

  • SHA1

    f5a37814247e38571eea79a509b81599b95868fd

  • SHA256

    2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab

  • SHA512

    88a17a768af4800e7b6f8f96cfb7de4788b5eceae6241dba694cf071410365508bb7982761bbbd518ada6e4db713e591b800a3365e1dd1daddc3918f09661958

  • SSDEEP

    1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/DtQzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfZQPBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

159.203.126.35:22279

Mutex

hnfkoikowllyvsdhi

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Client.exe

    • Size

      74KB

    • MD5

      518cefe78569449a64ba9fcc57722fc3

    • SHA1

      f5a37814247e38571eea79a509b81599b95868fd

    • SHA256

      2a1b43cafc7425461176f66986b25408dca8fedef6ec84b411a82da5be8953ab

    • SHA512

      88a17a768af4800e7b6f8f96cfb7de4788b5eceae6241dba694cf071410365508bb7982761bbbd518ada6e4db713e591b800a3365e1dd1daddc3918f09661958

    • SSDEEP

      1536:EUEkcx4VHsC0SPMV7e9VdQuDI6H1bf/DtQzc2LVclN:EUxcx4GfSPMV7e9VdQsH1bfZQPBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks