Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Dominios SPAM.txt

windows7-x64

10

Dominios SPAM.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dominios SPAM.txt

  • Size

    610B

  • Sample

    250312-rsagfavkv5

  • MD5

    f445f67aaa2cdbcf43302f46626e7ba6

  • SHA1

    093999b7b360448e7e7e67d2163cbfe1e5a365f6

  • SHA256

    4aa5adc7358ac31b6b739eb495bc07ee89331eb494d3e1170ce5dd4d9d19f280

  • SHA512

    dc505121e67bda6aa0523a6d7c3a7b86ba03f0c820f8411198d336286568487c78c8ef677289f271938c126ca7349f95703653341ed69b9f9ccb6b4cc68e7b3d

Score
10/10
asyncrat12mmmmmmmmmmdiscoveryrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

12MMMMMMMMMM

C2

australiamd2000.duckdns.org:9999

Mutex

DcRatMutex_qwqdanchunasdfsdfggsd

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Dominios SPAM.txt

    • Size

      610B

    • MD5

      f445f67aaa2cdbcf43302f46626e7ba6

    • SHA1

      093999b7b360448e7e7e67d2163cbfe1e5a365f6

    • SHA256

      4aa5adc7358ac31b6b739eb495bc07ee89331eb494d3e1170ce5dd4d9d19f280

    • SHA512

      dc505121e67bda6aa0523a6d7c3a7b86ba03f0c820f8411198d336286568487c78c8ef677289f271938c126ca7349f95703653341ed69b9f9ccb6b4cc68e7b3d

    Score
    10/10
    asyncrat12mmmmmmmmmmdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks