Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d
-
Size
783KB
-
Sample
221202-zrqe9sdb99
-
MD5
735f0f706afd0913eff44095eea10e31
-
SHA1
5ef1b959ccaf5364663d1056b87fe1ebf85fea51
-
SHA256
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d
-
SHA512
32c930576362d68b46b4ab2a5392f63183425b49a8145217eebc19fae70dbbe30d7c1f07abc74b02ed97b8af928de3f299c8fecad12300420aa62e09372345a5
-
SSDEEP
12288:jfoZQG1PyUwGh3Q9xRQpR3PvGLxe0DMwRoZQp1PyUwGhxYV:Tod1twGwkR3PIx7DBoe1twGC
Behavioral task
behavioral1
Sample
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d
-
Size
783KB
-
MD5
735f0f706afd0913eff44095eea10e31
-
SHA1
5ef1b959ccaf5364663d1056b87fe1ebf85fea51
-
SHA256
a46fc273226d0ef8cc8cd79ff08bd7cf5bb43f5d584cc42c197f0cb49bbca17d
-
SHA512
32c930576362d68b46b4ab2a5392f63183425b49a8145217eebc19fae70dbbe30d7c1f07abc74b02ed97b8af928de3f299c8fecad12300420aa62e09372345a5
-
SSDEEP
12288:jfoZQG1PyUwGh3Q9xRQpR3PvGLxe0DMwRoZQp1PyUwGhxYV:Tod1twGwkR3PIx7DBoe1twGC
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-