Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6W5B0_Client.exe

windows7-x64

10

6W5B0_Client.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6W5B0_Client.exe

  • Size

    74KB

  • Sample

    250309-rd3jnssm17

  • MD5

    ac3d5bd558470ef261fa0f338a0311ef

  • SHA1

    9c48c1d3d731e8d7df762df78dcf466673ec4408

  • SHA256

    89cea2c6daa953dbc685bb583f8ef631f08c9c29e29485b2ec46afe49fbd5651

  • SHA512

    cff3bd07c6e169d49eaca35fe6b6b698bec669b0faf1144919080d2f2abeb10639b5684e3d55d849fa6aa61d85e592561e821eb55b3bb5cc6367d66d44aa3bc1

  • SSDEEP

    1536:dUi8cxkABCcb6PMV3e9VdQuDI6H1bf/YCd6F4QzcvjVclN:dUTcxkSNb6PMV3e9VdQsH1bf7dbQaJY

Score
10/10
asyncratvenomratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

103.83.164.33:4449
Mutex

iyziqtacatvjvjj

Attributes
  • delay

    1

  • install

    false

  • install_file

    hello

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      6W5B0_Client.exe

    • Size

      74KB

    • MD5

      ac3d5bd558470ef261fa0f338a0311ef

    • SHA1

      9c48c1d3d731e8d7df762df78dcf466673ec4408

    • SHA256

      89cea2c6daa953dbc685bb583f8ef631f08c9c29e29485b2ec46afe49fbd5651

    • SHA512

      cff3bd07c6e169d49eaca35fe6b6b698bec669b0faf1144919080d2f2abeb10639b5684e3d55d849fa6aa61d85e592561e821eb55b3bb5cc6367d66d44aa3bc1

    • SSDEEP

      1536:dUi8cxkABCcb6PMV3e9VdQuDI6H1bf/YCd6F4QzcvjVclN:dUTcxkSNb6PMV3e9VdQsH1bf7dbQaJY

    Score
    10/10
    asyncratvenomratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks