Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SUCKcock.exe

  • Size

    1.2MB

  • Sample

    250316-yghr1a1qy2

  • MD5

    04fda22c8c58e98eaaa048f00287a67f

  • SHA1

    0a3c1877c76517ff24051f27dc725532ad0d5517

  • SHA256

    9f5b7f85dbc8d7a989af4e5bf072f5a460f691eb70aa8ebe438a7023f976e69d

  • SHA512

    b7352353497940f32113cf52ca028493c8fd5cc4307b73ad6944dd3d1069eab93cb4bbe59c4c894f6bf036f79c29ee9bae8f4fd113a14830c7aa7c1a4282e1ff

  • SSDEEP

    24576:j/mPUqMmMCsmsasmsCMmMKsmsCMmMaMmMCsmswVMmMCsmsasmsCMmMKsmsCMmMaG:jpI4o+aqz8lur

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:4449

87.121.79.75:4449

Mutex

zertkjpuakjkjnjm

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %Temp%

aes.plain

Targets

    • Target

      SUCKcock.exe

    • Size

      1.2MB

    • MD5

      04fda22c8c58e98eaaa048f00287a67f

    • SHA1

      0a3c1877c76517ff24051f27dc725532ad0d5517

    • SHA256

      9f5b7f85dbc8d7a989af4e5bf072f5a460f691eb70aa8ebe438a7023f976e69d

    • SHA512

      b7352353497940f32113cf52ca028493c8fd5cc4307b73ad6944dd3d1069eab93cb4bbe59c4c894f6bf036f79c29ee9bae8f4fd113a14830c7aa7c1a4282e1ff

    • SSDEEP

      24576:j/mPUqMmMCsmsasmsCMmMKsmsCMmMaMmMCsmswVMmMCsmsasmsCMmMKsmsCMmMaG:jpI4o+aqz8lur

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

    • Async RAT payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks