Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

9516bff6ff...ee.exe

windows7-x64

10

9516bff6ff...ee.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9516bff6ff164376cebf71d54f4fdc4277d3b82842b8af30f3b85d93a68830ee

  • Size

    272KB

  • Sample

    221205-f91jeaee7t

  • MD5

    746b18598fa3ef1ea9940e1c34dfaab0

  • SHA1

    8b521cfcf91e3e6da4f7ec85d9fc3f852ce798c3

  • SHA256

    9516bff6ff164376cebf71d54f4fdc4277d3b82842b8af30f3b85d93a68830ee

  • SHA512

    175efafe11b2fdd3914745a7deb6a806d5a9cac10f4b4d6ee48130278db6b4206658004d20d6856e0071952e3980bc21fe1fc0c7615742a188f8973bd11d37e1

  • SSDEEP

    6144:QXt1geJ6RgCHsM1NpUgGsoozQ9bVxwuLm:It1geJagC516kgxwu

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      9516bff6ff164376cebf71d54f4fdc4277d3b82842b8af30f3b85d93a68830ee

    • Size

      272KB

    • MD5

      746b18598fa3ef1ea9940e1c34dfaab0

    • SHA1

      8b521cfcf91e3e6da4f7ec85d9fc3f852ce798c3

    • SHA256

      9516bff6ff164376cebf71d54f4fdc4277d3b82842b8af30f3b85d93a68830ee

    • SHA512

      175efafe11b2fdd3914745a7deb6a806d5a9cac10f4b4d6ee48130278db6b4206658004d20d6856e0071952e3980bc21fe1fc0c7615742a188f8973bd11d37e1

    • SSDEEP

      6144:QXt1geJ6RgCHsM1NpUgGsoozQ9bVxwuLm:It1geJagC516kgxwu

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks