Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b
-
Size
388KB
-
Sample
231010-zwzjqsda95
-
MD5
35f66c79f4dfcc11119c020cca13821e
-
SHA1
dcc8b9b4f72c4f26e0ad4144db5aaf1f6089e941
-
SHA256
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b
-
SHA512
b8db6628ff63bba28927e2d76a127caa17f3c1cce6dd7a180c7fa09b1c88af7b522c4b2a85864a8f0025232dff6aaf0e874abb5a7d81c84fa59cc0ede1ebf9b0
-
SSDEEP
6144:fIyLEbWaR5Cc37a3vs16lF4GMunOucTTTTrJi:wUaWaR5v37a3vF2GMYOuH
Static task
static1
Behavioral task
behavioral1
Sample
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gh0strat
82.156.159.199
Targets
-
-
Target
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b
-
Size
388KB
-
MD5
35f66c79f4dfcc11119c020cca13821e
-
SHA1
dcc8b9b4f72c4f26e0ad4144db5aaf1f6089e941
-
SHA256
bc90f2e42eeb0cb11f141829067265410b605dddfa64ed353cbc3a47613c0e4b
-
SHA512
b8db6628ff63bba28927e2d76a127caa17f3c1cce6dd7a180c7fa09b1c88af7b522c4b2a85864a8f0025232dff6aaf0e874abb5a7d81c84fa59cc0ede1ebf9b0
-
SSDEEP
6144:fIyLEbWaR5Cc37a3vs16lF4GMunOucTTTTrJi:wUaWaR5v37a3vF2GMYOuH
Score10/10-
Gh0st RAT payload
-
Executes dropped EXE
-
Adds Run key to start application
-