Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

74b103b8da...f3.exe

windows7-x64

10

74b103b8da...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74b103b8da44d7b608aee049d97937582fc9d9a70db5e3dfeb7cf95258a5a4f3

  • Size

    36KB

  • Sample

    230524-w4qd9aea73

  • MD5

    46b27885ea7d3fef93d48949bb201eae

  • SHA1

    7cc03ea6cadabac5ee6dbe9bf9f2475705edfaa4

  • SHA256

    74b103b8da44d7b608aee049d97937582fc9d9a70db5e3dfeb7cf95258a5a4f3

  • SHA512

    86ad5f2ba61326b9dee70a41f6c50611488605497b8aac648eaca3fa3c7d62815e44f0347553d1a45d129e36b3ad76777f7dc5cae3abe53fe8d570af35fa8d37

  • SSDEEP

    384:tg/M6HhPy+Jq5j01ULBxtzQyNQR61bMpYj8IxM:tg/5hPy3t01Ulu8bLj8IxM

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      74b103b8da44d7b608aee049d97937582fc9d9a70db5e3dfeb7cf95258a5a4f3

    • Size

      36KB

    • MD5

      46b27885ea7d3fef93d48949bb201eae

    • SHA1

      7cc03ea6cadabac5ee6dbe9bf9f2475705edfaa4

    • SHA256

      74b103b8da44d7b608aee049d97937582fc9d9a70db5e3dfeb7cf95258a5a4f3

    • SHA512

      86ad5f2ba61326b9dee70a41f6c50611488605497b8aac648eaca3fa3c7d62815e44f0347553d1a45d129e36b3ad76777f7dc5cae3abe53fe8d570af35fa8d37

    • SSDEEP

      384:tg/M6HhPy+Jq5j01ULBxtzQyNQR61bMpYj8IxM:tg/5hPy3t01Ulu8bLj8IxM

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks