Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d95ef519405081f161338eb8f37c4ad42150205b96e0663f58bca2e1e8742163
-
Size
2.5MB
-
Sample
231125-jvb42shc83
-
MD5
f1a04d7efbb11e7af8a5668d6aebba40
-
SHA1
b795e17511b483fc2563bf952e22baa9648a5c5d
-
SHA256
d95ef519405081f161338eb8f37c4ad42150205b96e0663f58bca2e1e8742163
-
SHA512
00bfc8b1f8c4c7a420b2b63be9485dc03505d3c05eeeabe3a451abdc9c27390ab27d7800e6016e1efb44cd8ff7472c7a956184afd501614ac5a7fdc92c1e5298
-
SSDEEP
24576:bCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHj:bCwsbCANnKXferL7Vwe/Gg0P+WhEs6
Static task
static1
Behavioral task
behavioral1
Sample
d95ef519405081f161338eb8f37c4ad42150205b96e0663f58bca2e1e8742163.exe
Resource
win7-20231023-en
Malware Config
Targets
-
-
Target
d95ef519405081f161338eb8f37c4ad42150205b96e0663f58bca2e1e8742163
-
Size
2.5MB
-
MD5
f1a04d7efbb11e7af8a5668d6aebba40
-
SHA1
b795e17511b483fc2563bf952e22baa9648a5c5d
-
SHA256
d95ef519405081f161338eb8f37c4ad42150205b96e0663f58bca2e1e8742163
-
SHA512
00bfc8b1f8c4c7a420b2b63be9485dc03505d3c05eeeabe3a451abdc9c27390ab27d7800e6016e1efb44cd8ff7472c7a956184afd501614ac5a7fdc92c1e5298
-
SSDEEP
24576:bCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHj:bCwsbCANnKXferL7Vwe/Gg0P+WhEs6
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-