Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

90a9a9a954...aa.exe

windows7-x64

10

90a9a9a954...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90a9a9a95482f3ac671e5ca6fa903f77981d8c4e9a5fdfdab30aa9e78b209caa

  • Size

    88KB

  • Sample

    230828-e62fvsff83

  • MD5

    53288ce74e42c1d735fd47e24212e97d

  • SHA1

    3bdc0fac46e971383aab3f12f59ca57aee6bf2e8

  • SHA256

    90a9a9a95482f3ac671e5ca6fa903f77981d8c4e9a5fdfdab30aa9e78b209caa

  • SHA512

    de43cd22e0d5c0ab6bcecd69a716f5f870d511c4dc65d63354f1ffc0ce241fe8493f872c25beca34570d336944e969e5617fb37f277794c0a8a876003a88db57

  • SSDEEP

    1536:L09QyXIbKQ2ctn5lbE2buHW1111111111111111111111111111111111111111f:+QyXImQ2ctnvbEDW111111111111111t

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      90a9a9a95482f3ac671e5ca6fa903f77981d8c4e9a5fdfdab30aa9e78b209caa

    • Size

      88KB

    • MD5

      53288ce74e42c1d735fd47e24212e97d

    • SHA1

      3bdc0fac46e971383aab3f12f59ca57aee6bf2e8

    • SHA256

      90a9a9a95482f3ac671e5ca6fa903f77981d8c4e9a5fdfdab30aa9e78b209caa

    • SHA512

      de43cd22e0d5c0ab6bcecd69a716f5f870d511c4dc65d63354f1ffc0ce241fe8493f872c25beca34570d336944e969e5617fb37f277794c0a8a876003a88db57

    • SSDEEP

      1536:L09QyXIbKQ2ctn5lbE2buHW1111111111111111111111111111111111111111f:+QyXImQ2ctnvbEDW111111111111111t

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks