Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e51b0bc031c51b426f84321160b5c07335c3578cd25e78eb4495e49e8c7cf7ff
-
Size
6.3MB
-
Sample
230831-rd357sfa6x
-
MD5
7eef4f131f3d78a193880761886f4ecd
-
SHA1
4d3b592c149b7a8d91e238ac99e50b187103add8
-
SHA256
e51b0bc031c51b426f84321160b5c07335c3578cd25e78eb4495e49e8c7cf7ff
-
SHA512
8b6b8243785514ec3605dbbce189eea023fc923e96a8178805a7e9230db15cb570c2379925a74960593fca7e4b9ba3e5256e6fcf9e4dc08f8c4d3a4a56e262ce
-
SSDEEP
98304:5ZJt4HINy2LkfefS7peKOB3NLSiwbrM95+NTl:biINy2Lkfe4pc3+rk5ql
Static task
static1
Behavioral task
behavioral1
Sample
e51b0bc031c51b426f84321160b5c07335c3578cd25e78eb4495e49e8c7cf7ff.exe
Resource
win7-20230824-en
Malware Config
Targets
-
-
Target
e51b0bc031c51b426f84321160b5c07335c3578cd25e78eb4495e49e8c7cf7ff
-
Size
6.3MB
-
MD5
7eef4f131f3d78a193880761886f4ecd
-
SHA1
4d3b592c149b7a8d91e238ac99e50b187103add8
-
SHA256
e51b0bc031c51b426f84321160b5c07335c3578cd25e78eb4495e49e8c7cf7ff
-
SHA512
8b6b8243785514ec3605dbbce189eea023fc923e96a8178805a7e9230db15cb570c2379925a74960593fca7e4b9ba3e5256e6fcf9e4dc08f8c4d3a4a56e262ce
-
SSDEEP
98304:5ZJt4HINy2LkfefS7peKOB3NLSiwbrM95+NTl:biINy2Lkfe4pc3+rk5ql
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-