Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

426c8ce495...88.exe

windows7-x64

8

426c8ce495...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    426c8ce49555ab2f91af42246e43b9ef78b85ef8733d8de043b3e1049dbc9388

  • Size

    20.7MB

  • Sample

    221205-r9y65adf51

  • MD5

    70e42100914145f42e4104c6e1f22ee6

  • SHA1

    1ce2daa5a21a0379ec324e041bdfe0c903c764d1

  • SHA256

    426c8ce49555ab2f91af42246e43b9ef78b85ef8733d8de043b3e1049dbc9388

  • SHA512

    44863973efca25ac059bf1e9920da11d3d653f468b324d983077b315ccab3a9629b810e70e7fcf5d456a4283054ab58faafcabc779349434852f1d9822b28bd4

  • SSDEEP

    6144:6Lm+N50Pve6Eq8tkfSOBlWWRmGwL4QQgKKX8x7/2xWqWma2XDzHPt281+nq:6v/0O6l8tpOjWtGNgDUiWqWNKDrt2zq

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      426c8ce49555ab2f91af42246e43b9ef78b85ef8733d8de043b3e1049dbc9388

    • Size

      20.7MB

    • MD5

      70e42100914145f42e4104c6e1f22ee6

    • SHA1

      1ce2daa5a21a0379ec324e041bdfe0c903c764d1

    • SHA256

      426c8ce49555ab2f91af42246e43b9ef78b85ef8733d8de043b3e1049dbc9388

    • SHA512

      44863973efca25ac059bf1e9920da11d3d653f468b324d983077b315ccab3a9629b810e70e7fcf5d456a4283054ab58faafcabc779349434852f1d9822b28bd4

    • SSDEEP

      6144:6Lm+N50Pve6Eq8tkfSOBlWWRmGwL4QQgKKX8x7/2xWqWma2XDzHPt281+nq:6v/0O6l8tpOjWtGNgDUiWqWNKDrt2zq

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks