Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e1b2f35b7d...2e.exe

windows7-x64

10

e1b2f35b7d...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b2f35b7dc0bf79df1914e37ba71f0ee8daf55f960c0f4d51683d52faea4f2e

  • Size

    1.8MB

  • Sample

    250306-sa8f7a1tdz

  • MD5

    a75269d28a668b912ea70273129af9e9

  • SHA1

    0cd5bd794887c91f613fc4f0a690fc63225a7e68

  • SHA256

    e1b2f35b7dc0bf79df1914e37ba71f0ee8daf55f960c0f4d51683d52faea4f2e

  • SHA512

    ac239bec4ee549bd7ba079a77f89f31176837344ac83b8a8dc31c58d19e6e9cfa7eb8d6cf8c8d3d1db3a9a8e0d0a64533555f9453eeacbb6fc812cdd56c06ac5

  • SSDEEP

    49152:xcL7ZC9MhopZuGsWYkIqv8CftgdVw+3t0cBcK:xcxC9lL1sWbI45+VrtJ7

Score
10/10
asyncratstormkittyvenomratdiscoveryratstealer

Malware Config

Targets

    • Target

      e1b2f35b7dc0bf79df1914e37ba71f0ee8daf55f960c0f4d51683d52faea4f2e

    • Size

      1.8MB

    • MD5

      a75269d28a668b912ea70273129af9e9

    • SHA1

      0cd5bd794887c91f613fc4f0a690fc63225a7e68

    • SHA256

      e1b2f35b7dc0bf79df1914e37ba71f0ee8daf55f960c0f4d51683d52faea4f2e

    • SHA512

      ac239bec4ee549bd7ba079a77f89f31176837344ac83b8a8dc31c58d19e6e9cfa7eb8d6cf8c8d3d1db3a9a8e0d0a64533555f9453eeacbb6fc812cdd56c06ac5

    • SSDEEP

      49152:xcL7ZC9MhopZuGsWYkIqv8CftgdVw+3t0cBcK:xcxC9lL1sWbI45+VrtJ7

    Score
    10/10
    asyncratstormkittyvenomratdiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks