Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36f9ad99219ec612306a35b8d69ead0cbd2792701e0599314c0fca7c035399e4

  • Size

    128KB

  • Sample

    250321-xwrg1swxet

  • MD5

    3657da33a177e630833f71ffb853c758

  • SHA1

    96c5716ce5114c9aea92d924038e250e43aa2468

  • SHA256

    36f9ad99219ec612306a35b8d69ead0cbd2792701e0599314c0fca7c035399e4

  • SHA512

    50cdaf14e580803cf28d0961054da165e8a79847b884523e905830fe831c3daa8b27926fe1d22d307800594720853c9b931d4c4bf503fe3e96702f8f5ba2919a

  • SSDEEP

    3072:RUEcx5zHoPMVbUcPH1bUeQ78uD36dDJVJ6FY:RUHoPMVNVbH88i36dDJVI

Malware Config

Extracted

Family

asyncrat

Version

Venom Pwn3rzs' Edtition v6.0.1

Botnet

V-lg60

C2

37.48.64.102:4950

Mutex

yawyrgpacvfvsfgbz

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      36f9ad99219ec612306a35b8d69ead0cbd2792701e0599314c0fca7c035399e4

    • Size

      128KB

    • MD5

      3657da33a177e630833f71ffb853c758

    • SHA1

      96c5716ce5114c9aea92d924038e250e43aa2468

    • SHA256

      36f9ad99219ec612306a35b8d69ead0cbd2792701e0599314c0fca7c035399e4

    • SHA512

      50cdaf14e580803cf28d0961054da165e8a79847b884523e905830fe831c3daa8b27926fe1d22d307800594720853c9b931d4c4bf503fe3e96702f8f5ba2919a

    • SSDEEP

      3072:RUEcx5zHoPMVbUcPH1bUeQ78uD36dDJVJ6FY:RUHoPMVNVbH88i36dDJVI

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks