Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Venom 2.8 ...ed.exe

windows7-x64

7

Venom 2.8 ...ed.exe

windows10-2004-x64

7

Resubmissions

27/01/2025, 23:37

250127-3mmelaznan 10

27/01/2025, 23:34

250127-3kgrbszmcr 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Venom 2.8 CRACKED - FINAL.7z

  • Size

    26.1MB

  • MD5

    312d5821bf53aa72fbae063c003fbbea

  • SHA1

    411d1c1f83739cf98a1e73cf5b475a20b63bb95f

  • SHA256

    0dc45546bbd24a266d52876385c3b588b05192d54289a1c130b47783e3074c8e

  • SHA512

    80af7780d80c47ceb216bc5a764f642defbef19707b4b5ea71de829f43a6dad51f5b44cdac125f40cad8a7df3fcd607b6fdf5ac49f3a3459a125cddb0447ff4a

  • SSDEEP

    393216:BitYCoE8ipUzRyRLKNg1/AxasrWw+GTwc481pEeeMgWv6kjXREIsmMzNGfr:BitYCvKzgPKBCw+8wz0PwWv6aapGfr

Score
10/10
agilenetquasar

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Venom 2.8 CRACKED - FINAL.7z
    .7z
  • Venom 2.8 CRACKED - FINAL/VenomRemote_Cracked.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Venom 2.8 CRACKED - FINAL/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Venom 2.8 CRACKED - FINAL/settings.xml