Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

dc747b7e53...17.exe

windows7-x64

10

dc747b7e53...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc747b7e53b591ae8a6936cc33a764510b95f15fa50bc08f207cc509b3256817

  • Size

    176KB

  • Sample

    221001-12tq4saghl

  • MD5

    03c856ff9f8d8e412e9414e58a1cec4e

  • SHA1

    714ebb71e273deda6a078bf3a77f1216b4049f64

  • SHA256

    dc747b7e53b591ae8a6936cc33a764510b95f15fa50bc08f207cc509b3256817

  • SHA512

    9265292e1c36b2283fb615785467f2df93fbdd49c6b2890c25797db649d427d0517bd674049e37b66e09a8f28d66ebe3fa45764fff24a4426471035fcc26805f

  • SSDEEP

    3072:ncYcYKEzcW526y6hs6PhwtqrorsVlkTEIcy1O4F3JhMWIknqX5d+vIjc8UW:ncBYKEz557e2VroYoTU4JOWnS5d+v0cu

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      dc747b7e53b591ae8a6936cc33a764510b95f15fa50bc08f207cc509b3256817

    • Size

      176KB

    • MD5

      03c856ff9f8d8e412e9414e58a1cec4e

    • SHA1

      714ebb71e273deda6a078bf3a77f1216b4049f64

    • SHA256

      dc747b7e53b591ae8a6936cc33a764510b95f15fa50bc08f207cc509b3256817

    • SHA512

      9265292e1c36b2283fb615785467f2df93fbdd49c6b2890c25797db649d427d0517bd674049e37b66e09a8f28d66ebe3fa45764fff24a4426471035fcc26805f

    • SSDEEP

      3072:ncYcYKEzcW526y6hs6PhwtqrorsVlkTEIcy1O4F3JhMWIknqX5d+vIjc8UW:ncBYKEz557e2VroYoTU4JOWnS5d+v0cu

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Sets DLL path for service in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks