Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

83f9878a9b...14.exe

windows7-x64

10

83f9878a9b...14.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114

  • Size

    88KB

  • Sample

    221129-neay9sgd3w

  • MD5

    d62bccacda615cbaacb022d1f37ce567

  • SHA1

    e50dd823962b5219afe54866bfb0e7ba19824a68

  • SHA256

    83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114

  • SHA512

    76768fc44ce4a0ff37af8587ce2dc0f07953c371878c739ab4271a047a69a9ef64b9f1ee5f9991c753b7ca1873414dfd4f5d47a2f06202e9637d319d76b1fb90

  • SSDEEP

    1536:mAhTyTTFQNC13U4rtnDb4tmJAuxJbCEryyfw6hqgrAjl+OP+ftTI00MRmhe:LhT2137DYmJAuxx9wPgrYl+OP+y00MRZ

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114

    • Size

      88KB

    • MD5

      d62bccacda615cbaacb022d1f37ce567

    • SHA1

      e50dd823962b5219afe54866bfb0e7ba19824a68

    • SHA256

      83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114

    • SHA512

      76768fc44ce4a0ff37af8587ce2dc0f07953c371878c739ab4271a047a69a9ef64b9f1ee5f9991c753b7ca1873414dfd4f5d47a2f06202e9637d319d76b1fb90

    • SSDEEP

      1536:mAhTyTTFQNC13U4rtnDb4tmJAuxJbCEryyfw6hqgrAjl+OP+ftTI00MRmhe:LhT2137DYmJAuxx9wPgrYl+OP+y00MRZ

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks