Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Infected.exe
windows7-x64
10Infected.exe
windows10-2004-x64
10Infected.exe
android-9-x86
Infected.exe
android-10-x64
Infected.exe
android-11-x64
Infected.exe
macos-10.15-amd64
Infected.exe
ubuntu-18.04-amd64
Infected.exe
debian-9-armhf
Infected.exe
debian-9-mips
Infected.exe
debian-9-mipsel
Behavioral task
behavioral1
Sample
Infected.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Infected.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Infected.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
Infected.exe
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
Infected.exe
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
Infected.exe
Resource
macos-20241106-en
Behavioral task
behavioral7
Sample
Infected.exe
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
Infected.exe
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
Infected.exe
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
Infected.exe
Resource
debian9-mipsel-20240226-en
General
-
Target
Infected.exe
-
Size
63KB
-
MD5
f9627d6e4f2f31b049f21938300ef8c3
-
SHA1
730bce81ce442c845d3f4d4182c33efb4e53d066
-
SHA256
2e0facb63aa6b9a7b70228013ccc8d00b20eca32f10846abc60d1f4787600a8c
-
SHA512
9606761f987cc346eaa9e8ddf3d8e0e120d69df9efc167d6be999ca13637eda6549153437fac77b41dab58cf93aea703b97606b1aed591940cb2c7963a81dad0
-
SSDEEP
768:Cm0vnfEXf78awC8A+XU2azcBRL5JTk1+T4KSBGHmDbD/ph0oXJAl6TUkSusdpqKX:qEXiLdSJYUbdh9cusdpqKmY7
Malware Config
Extracted
asyncrat
Default
127.0.0.1:1111
45.61.159.148:1111
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Infected.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ