Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6d1c48916c...9N.exe

windows7-x64

10

6d1c48916c...9N.exe

windows10-2004-x64

10

6d1c48916c...9N.exe

android-9-x86

6d1c48916c...9N.exe

android-10-x64

6d1c48916c...9N.exe

android-11-x64

6d1c48916c...9N.exe

macos-10.15-amd64

6d1c48916c...9N.exe

ubuntu-18.04-amd64

6d1c48916c...9N.exe

debian-9-armhf

6d1c48916c...9N.exe

debian-9-mips

6d1c48916c...9N.exe

debian-9-mipsel

Resubmissions

13/01/2025, 00:36

250113-ax4gmsxjfv 10

13/01/2025, 00:03

250113-acj79swjft 10

12/01/2025, 13:58

250112-q9s5faxnfp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d1c48916c9129016e27531ffad82721b6f224120470db6ae42d75242c708439N.exe

  • Size

    74KB

  • MD5

    6458aa24ec566dd7a15df30f7dc6cd20

  • SHA1

    dd7d94c1d325c7c4eb143fbba7cbe6e0092576a0

  • SHA256

    6d1c48916c9129016e27531ffad82721b6f224120470db6ae42d75242c708439

  • SHA512

    48e67edc27628d84421bc3525e67382285f9f1176555f0c60710e02ef23f02eb3d82b619f6772cb70e4ed6b6e0d6549006ac60d0e4ccbd78aa83e25155205fce

  • SSDEEP

    1536:nUk0cxVGlCBiPMVJKTc3XIXH1bk/aQxiQzciLVclN:nURcxVMWiPMVJKKyH1bkoQzBY

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

gmgvhbbdlzsg

Attributes
  • c2_url_file

    https://paste.com.tr/raw/hahuexlr

  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d1c48916c9129016e27531ffad82721b6f224120470db6ae42d75242c708439N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections