Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

c5ddaee7ad...27.exe

windows7-x64

8

c5ddaee7ad...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5ddaee7ad6047ed4395473b86693af38d8c2fefe2172ac09d7a68a90446d927

  • Size

    98KB

  • Sample

    221203-f3949sgh89

  • MD5

    371bb78624d73e172a8a6e9a0faf4331

  • SHA1

    24a4663d3b42d094a0b9b9c18b997663f12a8ffa

  • SHA256

    c5ddaee7ad6047ed4395473b86693af38d8c2fefe2172ac09d7a68a90446d927

  • SHA512

    69a13b07fa0cb5b949850419bca717f1388fa98733e0759edb5f5d66f9b2708a21345c1443c805f632184654b714da96c2819ecde97e8a52eaac65b632de39c4

  • SSDEEP

    1536:SKFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prk23qlhzwYgD:SQS4jHS8q/3nTzePCwNUh4E9kBD+

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      c5ddaee7ad6047ed4395473b86693af38d8c2fefe2172ac09d7a68a90446d927

    • Size

      98KB

    • MD5

      371bb78624d73e172a8a6e9a0faf4331

    • SHA1

      24a4663d3b42d094a0b9b9c18b997663f12a8ffa

    • SHA256

      c5ddaee7ad6047ed4395473b86693af38d8c2fefe2172ac09d7a68a90446d927

    • SHA512

      69a13b07fa0cb5b949850419bca717f1388fa98733e0759edb5f5d66f9b2708a21345c1443c805f632184654b714da96c2819ecde97e8a52eaac65b632de39c4

    • SSDEEP

      1536:SKFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prk23qlhzwYgD:SQS4jHS8q/3nTzePCwNUh4E9kBD+

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks