Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df
-
Size
301KB
-
Sample
221207-crangsfd82
-
MD5
6112172c21e691b3f05acbddfa576037
-
SHA1
05d534e3f7fa904a9e941f180b2b6dc43482d754
-
SHA256
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df
-
SHA512
630289835834f4478b910a5e3398c14e07f5211ebbb9777bcd50e08a0711dc91bf23d42081e2ab568accf17f3a74f8d815e877107883019560cb79992dd5923e
-
SSDEEP
6144:3Tws7qfK7geLltdZL02vIM9R0VGFedwGNynHZ8uGjJZ9q6+p9HD2s2yU4:jhqigeLTdOA9cGFvGNKotZ9qnOF4
Static task
static1
Behavioral task
behavioral1
Sample
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df
-
Size
301KB
-
MD5
6112172c21e691b3f05acbddfa576037
-
SHA1
05d534e3f7fa904a9e941f180b2b6dc43482d754
-
SHA256
d7ed546ca690c26826a703bd67ff278f874682cb1af27f983200a4fc601ca0df
-
SHA512
630289835834f4478b910a5e3398c14e07f5211ebbb9777bcd50e08a0711dc91bf23d42081e2ab568accf17f3a74f8d815e877107883019560cb79992dd5923e
-
SSDEEP
6144:3Tws7qfK7geLltdZL02vIM9R0VGFedwGNynHZ8uGjJZ9q6+p9HD2s2yU4:jhqigeLTdOA9cGFvGNKotZ9qnOF4
Score10/10-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-