Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7bc05df6cbd9604ae4391bbabaedc7e354d0f9442ece56f73cc44b4d20cf5e19.exe

  • Size

    74KB

  • Sample

    250301-d9fswsyvev

  • MD5

    28451edba09329874ef2b0cf2ac0abbc

  • SHA1

    24b28e2e55d1bb3f8abb7880b904dce0048e4deb

  • SHA256

    7bc05df6cbd9604ae4391bbabaedc7e354d0f9442ece56f73cc44b4d20cf5e19

  • SHA512

    ef680dc166c2324aaec9abed0153ca365d23b308124531da410d39a127bffc583696095e85ab90a75168121ff1b0b96a921bb56eb2727ffa55898c6d557a90ce

  • SSDEEP

    1536:HUN8cxQFvCr6PMVWe9VdQuDI6H1bf/XyCjoIQzcYh6VclN:HUOcxQxs6PMVWe9VdQsH1bfPbvQNhIY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Eulen

Mutex

Microsoft_Sync_Manager

Attributes
  • delay

    1

  • install

    true

  • install_file

    DiscordHelper.exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/KnhCGRrn

aes.plain

Targets

    • Target

      7bc05df6cbd9604ae4391bbabaedc7e354d0f9442ece56f73cc44b4d20cf5e19.exe

    • Size

      74KB

    • MD5

      28451edba09329874ef2b0cf2ac0abbc

    • SHA1

      24b28e2e55d1bb3f8abb7880b904dce0048e4deb

    • SHA256

      7bc05df6cbd9604ae4391bbabaedc7e354d0f9442ece56f73cc44b4d20cf5e19

    • SHA512

      ef680dc166c2324aaec9abed0153ca365d23b308124531da410d39a127bffc583696095e85ab90a75168121ff1b0b96a921bb56eb2727ffa55898c6d557a90ce

    • SSDEEP

      1536:HUN8cxQFvCr6PMVWe9VdQuDI6H1bf/XyCjoIQzcYh6VclN:HUOcxQxs6PMVWe9VdQsH1bfPbvQNhIY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks