Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6fdf8f58c1a68b6c8360cf130a185e1a511c0aff7b9ff054074961cc25aaddeb
-
Size
375KB
-
Sample
221005-3fcxksfhf8
-
MD5
8a59180d71df091f5e612b91fabc43e9
-
SHA1
3c84fee5fb81298e6583dda6ce0ee71993aa3d57
-
SHA256
6fdf8f58c1a68b6c8360cf130a185e1a511c0aff7b9ff054074961cc25aaddeb
-
SHA512
78be3be6574de959225526517c71e41255170079cc1e0c9717a43fae94d1e731defb594a4ec5f695a7cd46bbff55c488c04de3cf343efa503970b99b0d96508f
-
SSDEEP
6144:Uv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:U4VOiF1WD7kE1dTYOi8V5u23zmWFy4
Static task
static1
Malware Config
Targets
-
-
Target
6fdf8f58c1a68b6c8360cf130a185e1a511c0aff7b9ff054074961cc25aaddeb
-
Size
375KB
-
MD5
8a59180d71df091f5e612b91fabc43e9
-
SHA1
3c84fee5fb81298e6583dda6ce0ee71993aa3d57
-
SHA256
6fdf8f58c1a68b6c8360cf130a185e1a511c0aff7b9ff054074961cc25aaddeb
-
SHA512
78be3be6574de959225526517c71e41255170079cc1e0c9717a43fae94d1e731defb594a4ec5f695a7cd46bbff55c488c04de3cf343efa503970b99b0d96508f
-
SSDEEP
6144:Uv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:U4VOiF1WD7kE1dTYOi8V5u23zmWFy4
-
Gh0st RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-