Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ce1aeccd01...36.exe

windows7-x64

10

ce1aeccd01...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce1aeccd01ec870e7066b80ab23a4002585293b2775004e9b7618473ffa90636

  • Size

    136KB

  • Sample

    221107-rv7jysbfh8

  • MD5

    0d268ecbc52fdf5c30d3f8f6eb606eb0

  • SHA1

    cf2ea4ececa3db3e253104af7203d086a9204fb7

  • SHA256

    ce1aeccd01ec870e7066b80ab23a4002585293b2775004e9b7618473ffa90636

  • SHA512

    2d673640cce8c92629d674b917477b4041aa7244f2e6f402ada51fc4f61d5dedc943e1bb62928cf8338cc9e30f2b2f31d4e382b77a98054b07c86c9e8fe3e826

  • SSDEEP

    3072:Eu/Ln6sIZ8z9p5EXoHFT/e4pgncIsIf0LlCYUJvr7Zk6:f/Ln6sy8z9jEXoHFC47S0x6Jv

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      ce1aeccd01ec870e7066b80ab23a4002585293b2775004e9b7618473ffa90636

    • Size

      136KB

    • MD5

      0d268ecbc52fdf5c30d3f8f6eb606eb0

    • SHA1

      cf2ea4ececa3db3e253104af7203d086a9204fb7

    • SHA256

      ce1aeccd01ec870e7066b80ab23a4002585293b2775004e9b7618473ffa90636

    • SHA512

      2d673640cce8c92629d674b917477b4041aa7244f2e6f402ada51fc4f61d5dedc943e1bb62928cf8338cc9e30f2b2f31d4e382b77a98054b07c86c9e8fe3e826

    • SSDEEP

      3072:Eu/Ln6sIZ8z9p5EXoHFT/e4pgncIsIf0LlCYUJvr7Zk6:f/Ln6sy8z9jEXoHFC47S0x6Jv

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks