Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79
-
Size
496KB
-
Sample
231124-3bsr8sfh8w
-
MD5
3e821ec6513319de7cf6430a2f2ad072
-
SHA1
da2da5e6eafd983d7271a0898031d88205d1c03c
-
SHA256
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79
-
SHA512
d8025c62e5c40d8b925115cc24f08ea54572ffd29fb907a47a6981f0d8682bb7057b8ede436d2fd7d67067d3e878ddd903f70be6b11cefddbeff7ef706fe321e
-
SSDEEP
6144:QdyLEbWaR5CcwVPyZ5WfvD6Retk5ArfM:sUaWaR5vwNyZ5ckevrfM
Static task
static1
Behavioral task
behavioral1
Sample
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
gh0strat
110.41.134.233
Targets
-
-
Target
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79
-
Size
496KB
-
MD5
3e821ec6513319de7cf6430a2f2ad072
-
SHA1
da2da5e6eafd983d7271a0898031d88205d1c03c
-
SHA256
64174ba6ce7bc134f989a87a12cee143452b2530ea05b449bd76936b58500c79
-
SHA512
d8025c62e5c40d8b925115cc24f08ea54572ffd29fb907a47a6981f0d8682bb7057b8ede436d2fd7d67067d3e878ddd903f70be6b11cefddbeff7ef706fe321e
-
SSDEEP
6144:QdyLEbWaR5CcwVPyZ5WfvD6Retk5ArfM:sUaWaR5vwNyZ5ckevrfM
Score10/10-
Gh0st RAT payload
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-