Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

RAT.exe

windows7-x64

10

RAT.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RAT.exe

  • Size

    45KB

  • Sample

    250217-cbacsawlf1

  • MD5

    783e0c9c154fb8ea25a19611a33b0d37

  • SHA1

    fb637570ed5fb0019bea9b0c7d6dfd609db98720

  • SHA256

    d0cfc5f7dd8f4bb7e5cd2d68c851fdeb31a7aa944a1a2bb07c7d9b1d28178214

  • SHA512

    9f26f05e68d8f47081e614f46f304a5f155744ee1254fad27dc43596109020bc7f3cc65b8c48e0533493908523681c2641f27504c7d093a93a7e00a41159a838

  • SSDEEP

    768:VuAtPTgoRzbWUnd9rmo2qrG0WGJAQGQPPIjSjb1gX3iJUFJcngsDvOf3X+Q2oBD2:VuAtPTgG/2dlVJj+bSXSJU7cbTQ2Odix

Score
10/10
asyncratdefaultdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

Mutex

rgaFCpIl5YFM

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/48rLWQKM

aes.plain

Targets

    • Target

      RAT.exe

    • Size

      45KB

    • MD5

      783e0c9c154fb8ea25a19611a33b0d37

    • SHA1

      fb637570ed5fb0019bea9b0c7d6dfd609db98720

    • SHA256

      d0cfc5f7dd8f4bb7e5cd2d68c851fdeb31a7aa944a1a2bb07c7d9b1d28178214

    • SHA512

      9f26f05e68d8f47081e614f46f304a5f155744ee1254fad27dc43596109020bc7f3cc65b8c48e0533493908523681c2641f27504c7d093a93a7e00a41159a838

    • SSDEEP

      768:VuAtPTgoRzbWUnd9rmo2qrG0WGJAQGQPPIjSjb1gX3iJUFJcngsDvOf3X+Q2oBD2:VuAtPTgG/2dlVJj+bSXSJU7cbTQ2Odix

    Score
    10/10
    asyncratdefaultdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Downloads MZ/PE file

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks