Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad
-
Size
4.6MB
-
Sample
231126-q95s8shg5s
-
MD5
dda8c50b960ad5e95d9bb01e0db5b183
-
SHA1
d9b77da9accf6fda36a922c3094740f2278403a3
-
SHA256
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad
-
SHA512
f393cbaa642e0464313bead0136ec6f3a76b15404cea5e6ec18a2f8f30419cd8b12546d786bfe2dfdd5c5ee47269f2bfc8b2edeeb85d4432ddbbc9072c4ca40a
-
SSDEEP
49152:0YREXSVMDi3TFbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PL:t2SVMD8xbXsPN5kiQaZ56
Static task
static1
Behavioral task
behavioral1
Sample
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad
-
Size
4.6MB
-
MD5
dda8c50b960ad5e95d9bb01e0db5b183
-
SHA1
d9b77da9accf6fda36a922c3094740f2278403a3
-
SHA256
81b1c3abdbe2b6da35c9bd3058d8ac98f3a915fd813a60181f1003d8e14598ad
-
SHA512
f393cbaa642e0464313bead0136ec6f3a76b15404cea5e6ec18a2f8f30419cd8b12546d786bfe2dfdd5c5ee47269f2bfc8b2edeeb85d4432ddbbc9072c4ca40a
-
SSDEEP
49152:0YREXSVMDi3TFbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PL:t2SVMD8xbXsPN5kiQaZ56
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-