Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Ghost Rain.exe
-
Size
18.9MB
-
Sample
230816-n176wscd5w
-
MD5
7ee853ec7eab1e97db4327c72432999f
-
SHA1
9715766d7f86a5f49a9eb5bbba9d61103d8c2d0c
-
SHA256
d72b19f203834d1a06029131f8411701f7b7e433a9fd779079159ea59a2c67d9
-
SHA512
08d0ee64a247d7f3c1be841865a83940c5462c92404746ce776c429fb98ff6544e599fd81e5f10e089217947387f29664b4e361bf41d104e80efe1397de4cbee
-
SSDEEP
393216:PNGiajzIcF4ueuX+3qZ8ZlKXIzSLvBhG4w8FvJ4zneb2+1zd/J4HB3:tGkcuKX+3qKlSdi8dna+1BIN
Static task
static1
Behavioral task
behavioral1
Sample
Ghost Rain.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Ghost Rain.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
Ghost Rain.exe
-
Size
18.9MB
-
MD5
7ee853ec7eab1e97db4327c72432999f
-
SHA1
9715766d7f86a5f49a9eb5bbba9d61103d8c2d0c
-
SHA256
d72b19f203834d1a06029131f8411701f7b7e433a9fd779079159ea59a2c67d9
-
SHA512
08d0ee64a247d7f3c1be841865a83940c5462c92404746ce776c429fb98ff6544e599fd81e5f10e089217947387f29664b4e361bf41d104e80efe1397de4cbee
-
SSDEEP
393216:PNGiajzIcF4ueuX+3qZ8ZlKXIzSLvBhG4w8FvJ4zneb2+1zd/J4HB3:tGkcuKX+3qKlSdi8dna+1BIN
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-