Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b499fe0eb4...a3.exe

windows7-x64

10

b499fe0eb4...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b499fe0eb4136cf1878d283013fb1af0d141f77af5c03b8fa116a1177b6196a3

  • Size

    606KB

  • Sample

    221205-j9e49abe65

  • MD5

    e84598bf649ce1b39477136d2387e9c4

  • SHA1

    f774046b6b432b3df74a796ecbbd5b7dd9019767

  • SHA256

    b499fe0eb4136cf1878d283013fb1af0d141f77af5c03b8fa116a1177b6196a3

  • SHA512

    eb7d3b2752d10ff7699fc6b6da2c4c3ae2d3835ac1d940eafe6de39f8016318fec754383e0676a8513b11bd8992d40c21cfe9ef27d64d54f42d08928bdb7a8a8

  • SSDEEP

    12288:3cjrLQhTeGDF1r+TStBXvWyZ4uVNedGlHqM5VLFPMd:3cjeTeGDF1r+TStBXhZPVNXJqM5VJkd

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      b499fe0eb4136cf1878d283013fb1af0d141f77af5c03b8fa116a1177b6196a3

    • Size

      606KB

    • MD5

      e84598bf649ce1b39477136d2387e9c4

    • SHA1

      f774046b6b432b3df74a796ecbbd5b7dd9019767

    • SHA256

      b499fe0eb4136cf1878d283013fb1af0d141f77af5c03b8fa116a1177b6196a3

    • SHA512

      eb7d3b2752d10ff7699fc6b6da2c4c3ae2d3835ac1d940eafe6de39f8016318fec754383e0676a8513b11bd8992d40c21cfe9ef27d64d54f42d08928bdb7a8a8

    • SSDEEP

      12288:3cjrLQhTeGDF1r+TStBXvWyZ4uVNedGlHqM5VLFPMd:3cjeTeGDF1r+TStBXhZPVNXJqM5VJkd

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks