Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    jiajdjiashdiaj.exe

  • Size

    47KB

  • Sample

    250121-1gqhyssnbq

  • MD5

    5e7cffd772eae71a48e6bf2deb66d576

  • SHA1

    ef902e33a49be50b99dbe042265a1cb28c6b2cd8

  • SHA256

    bba0e51b546fc32428243f5a845fdc77f731afbd4fa3796fc208d5eb515885d5

  • SHA512

    ace8403f45287235bb90041892f3083f54f3421a7b33b0af1cc3f1437d1247676ed66ab39de2d75931d0a7961ee3952da9c7033911fffd481a2ad6886a0e646f

  • SSDEEP

    768:Quifo9Tg4xr5WUx9tDmo2qrul7JeUO5tHLPIkeKD6qB0bADHI1MzoK/HDwsnQk7W:Quqo9Tg+L2NlQUO5ukeyVWbArvzV/8s2

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

letsago.freemyip.com:9112

Mutex

qIMJywZY0n6G

Attributes
  • delay

    3

  • install

    false

  • install_file

    OBS Updater.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      jiajdjiashdiaj.exe

    • Size

      47KB

    • MD5

      5e7cffd772eae71a48e6bf2deb66d576

    • SHA1

      ef902e33a49be50b99dbe042265a1cb28c6b2cd8

    • SHA256

      bba0e51b546fc32428243f5a845fdc77f731afbd4fa3796fc208d5eb515885d5

    • SHA512

      ace8403f45287235bb90041892f3083f54f3421a7b33b0af1cc3f1437d1247676ed66ab39de2d75931d0a7961ee3952da9c7033911fffd481a2ad6886a0e646f

    • SSDEEP

      768:Quifo9Tg4xr5WUx9tDmo2qrul7JeUO5tHLPIkeKD6qB0bADHI1MzoK/HDwsnQk7W:Quqo9Tg+L2NlQUO5ukeyVWbArvzV/8s2

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

MITRE ATT&CK Enterprise v15

Tasks