Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

  • Size

    7.8MB

  • Sample

    230813-rtht7sda55

  • MD5

    4778cee989a91ab916338d8d49efc4b3

  • SHA1

    73bce3f6ec4edbaf3a863c475d6e08a0239b71e9

  • SHA256

    488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

  • SHA512

    e385c3d750230e8620c0dd902d9025ed9dc9e8a5cf179c1064e903be2e939725251ba2b79ca72e12dec7a06e7061fee5b2bdba223f6636b915a65f40e91c8c86

  • SSDEEP

    98304:xWsWpctwN8IxRs8gG/UsQEHxFPZwvIZAUerFooZwXjuPhdTMOgSGF0YJ:WNBR7cszHxTZrerFooZeIhd1GF0

Malware Config

Targets

    • Target

      488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

    • Size

      7.8MB

    • MD5

      4778cee989a91ab916338d8d49efc4b3

    • SHA1

      73bce3f6ec4edbaf3a863c475d6e08a0239b71e9

    • SHA256

      488cc37920a11c42c5535de635b6bfe121729665e9a5a7a5b9114c33b9493d4a

    • SHA512

      e385c3d750230e8620c0dd902d9025ed9dc9e8a5cf179c1064e903be2e939725251ba2b79ca72e12dec7a06e7061fee5b2bdba223f6636b915a65f40e91c8c86

    • SSDEEP

      98304:xWsWpctwN8IxRs8gG/UsQEHxFPZwvIZAUerFooZwXjuPhdTMOgSGF0YJ:WNBR7cszHxTZrerFooZeIhd1GF0

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Fatal Rat payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks