Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114
-
Size
88KB
-
Sample
221129-neay9sgd3w
-
MD5
d62bccacda615cbaacb022d1f37ce567
-
SHA1
e50dd823962b5219afe54866bfb0e7ba19824a68
-
SHA256
83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114
-
SHA512
76768fc44ce4a0ff37af8587ce2dc0f07953c371878c739ab4271a047a69a9ef64b9f1ee5f9991c753b7ca1873414dfd4f5d47a2f06202e9637d319d76b1fb90
-
SSDEEP
1536:mAhTyTTFQNC13U4rtnDb4tmJAuxJbCEryyfw6hqgrAjl+OP+ftTI00MRmhe:LhT2137DYmJAuxx9wPgrYl+OP+y00MRZ
Static task
static1
Behavioral task
behavioral1
Sample
83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114
-
Size
88KB
-
MD5
d62bccacda615cbaacb022d1f37ce567
-
SHA1
e50dd823962b5219afe54866bfb0e7ba19824a68
-
SHA256
83f9878a9b2bbda7e88f88df63947efd9c55afe50abfff7a28f4c7df4aafe114
-
SHA512
76768fc44ce4a0ff37af8587ce2dc0f07953c371878c739ab4271a047a69a9ef64b9f1ee5f9991c753b7ca1873414dfd4f5d47a2f06202e9637d319d76b1fb90
-
SSDEEP
1536:mAhTyTTFQNC13U4rtnDb4tmJAuxJbCEryyfw6hqgrAjl+OP+ftTI00MRmhe:LhT2137DYmJAuxx9wPgrYl+OP+y00MRZ
-
Gh0st RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-