Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Client.exe

  • Size

    73KB

  • Sample

    250308-qbav7sxvdw

  • MD5

    5f0167cbb9e1f4fd3fe808d6ba5160d7

  • SHA1

    5030ea78ef7bdc5208e17429465e4a9efe5c3a50

  • SHA256

    6a6e1f142f1841f833023131848ce54e187dfa6231d18bcb118073763c3832dd

  • SHA512

    4a5e772cdb0f4c10d4a1f8eaae59b586aad44318c43b7233776e6dc20f0bb985affa233ba9be95d302837e8c1e3833954a8215456eaba62bf670d940d7588d24

  • SSDEEP

    1536:LUUPcxVteCW7PMVee9VdQkhDIyH1bf/te9Qzc33VclN:LUmcxV4x7PMVee9VdQgH1bfVEQylY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4444

Mutex

skxumbciym

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Client.exe

    • Size

      73KB

    • MD5

      5f0167cbb9e1f4fd3fe808d6ba5160d7

    • SHA1

      5030ea78ef7bdc5208e17429465e4a9efe5c3a50

    • SHA256

      6a6e1f142f1841f833023131848ce54e187dfa6231d18bcb118073763c3832dd

    • SHA512

      4a5e772cdb0f4c10d4a1f8eaae59b586aad44318c43b7233776e6dc20f0bb985affa233ba9be95d302837e8c1e3833954a8215456eaba62bf670d940d7588d24

    • SSDEEP

      1536:LUUPcxVteCW7PMVee9VdQkhDIyH1bf/te9Qzc33VclN:LUmcxV4x7PMVee9VdQgH1bfVEQylY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks