Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e8133cb910...db.exe

windows7-x64

10

e8133cb910...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8133cb910d7942b3e41d86fde02e860aa8f19a61ad99d2b390202fee14f20db

  • Size

    80KB

  • Sample

    221127-s3498scg9v

  • MD5

    35e7e6980c5409ffcf9d5abee90dd52f

  • SHA1

    6dfe037cb602faf01d0da4b8bc86b8d371f4ee4f

  • SHA256

    e8133cb910d7942b3e41d86fde02e860aa8f19a61ad99d2b390202fee14f20db

  • SHA512

    dc3aed042b1e37ac9d6948df75b988344995e09052c906cf7593fcb14780f03412fb1928ccc77aa92881220528a62abbb40d914bb0b262127118d2a24269d2e4

  • SSDEEP

    1536:0Fz0LnC0atiq+9Cc73McaTBFb0bJ+oa/xrpnHTlyojsjxNe22JjIHMT:0Fz90hq+Yc7Hf4oa5r5sojsj+oMT

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      e8133cb910d7942b3e41d86fde02e860aa8f19a61ad99d2b390202fee14f20db

    • Size

      80KB

    • MD5

      35e7e6980c5409ffcf9d5abee90dd52f

    • SHA1

      6dfe037cb602faf01d0da4b8bc86b8d371f4ee4f

    • SHA256

      e8133cb910d7942b3e41d86fde02e860aa8f19a61ad99d2b390202fee14f20db

    • SHA512

      dc3aed042b1e37ac9d6948df75b988344995e09052c906cf7593fcb14780f03412fb1928ccc77aa92881220528a62abbb40d914bb0b262127118d2a24269d2e4

    • SSDEEP

      1536:0Fz0LnC0atiq+9Cc73McaTBFb0bJ+oa/xrpnHTlyojsjxNe22JjIHMT:0Fz90hq+Yc7Hf4oa5r5sojsj+oMT

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks