Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b03ce97b258ee3ebae207c954628c11734ab5f515a1ffce3513a548e31739d38

  • Size

    375KB

  • Sample

    220906-r4kfsabgdm

  • MD5

    ab90afe5b00f1e64bfa6f472e18bf9ab

  • SHA1

    1933cc780a636c411f16b012b1c3f08b0e0e4331

  • SHA256

    b03ce97b258ee3ebae207c954628c11734ab5f515a1ffce3513a548e31739d38

  • SHA512

    4d61d982264fca02f508f20cdbb70944d666fee47764c753500c9b00961689fc707ecaad4a957af893129df6dd992a643b6bf769c1c4480935d8c7e192faa1c5

  • SSDEEP

    6144:Dv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:D4VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      b03ce97b258ee3ebae207c954628c11734ab5f515a1ffce3513a548e31739d38

    • Size

      375KB

    • MD5

      ab90afe5b00f1e64bfa6f472e18bf9ab

    • SHA1

      1933cc780a636c411f16b012b1c3f08b0e0e4331

    • SHA256

      b03ce97b258ee3ebae207c954628c11734ab5f515a1ffce3513a548e31739d38

    • SHA512

      4d61d982264fca02f508f20cdbb70944d666fee47764c753500c9b00961689fc707ecaad4a957af893129df6dd992a643b6bf769c1c4480935d8c7e192faa1c5

    • SSDEEP

      6144:Dv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:D4VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks