Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
qpr.exe
-
Size
30KB
-
Sample
230721-v9wb1sge5y
-
MD5
1908c7682637a1cb64030ff57ad27efd
-
SHA1
92146ad99ccdd943fd995c6a904ec523565a8653
-
SHA256
46f3efb05e06e17600eea65c49c8700d5eb74ebb8611aa69981c413eb2e0c69a
-
SHA512
f5ee6d7c14ac5ddbd37adcf9e7a1a1c85181513d8401ef87bbd4903d6b799a6b8f9d0b757904d6cc1e8e6aefebceee7c8c3dad089a4b7c90604380808df2e989
-
SSDEEP
768:DOu2N1RVWBQOAnbAYOwWxf3mOIW/b2Jbex787GR:alvEOI5QWiJbe5nR
Static task
static1
Behavioral task
behavioral1
Sample
qpr.exe
Resource
win7-20230712-en
Malware Config
Extracted
gh0strat
154.39.248.196
Targets
-
-
Target
qpr.exe
-
Size
30KB
-
MD5
1908c7682637a1cb64030ff57ad27efd
-
SHA1
92146ad99ccdd943fd995c6a904ec523565a8653
-
SHA256
46f3efb05e06e17600eea65c49c8700d5eb74ebb8611aa69981c413eb2e0c69a
-
SHA512
f5ee6d7c14ac5ddbd37adcf9e7a1a1c85181513d8401ef87bbd4903d6b799a6b8f9d0b757904d6cc1e8e6aefebceee7c8c3dad089a4b7c90604380808df2e989
-
SSDEEP
768:DOu2N1RVWBQOAnbAYOwWxf3mOIW/b2Jbex787GR:alvEOI5QWiJbe5nR
-
Gh0st RAT payload
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-