Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

087de26a39...3b.exe

windows7-x64

10

087de26a39...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    087de26a39e65a6ea417783f0faaa43b

  • Size

    1.1MB

  • Sample

    231224-v1jxmahehm

  • MD5

    087de26a39e65a6ea417783f0faaa43b

  • SHA1

    0880b8a9be0eacdec34609ceefbee81258287c77

  • SHA256

    fcb013af969eda15bcac41e895653ec5eea09ce6b08f3adbd40733c7564d4407

  • SHA512

    a4e86aa1198fc1c8d566fb042656aab08e2f2456d693751124e2a91f13f88ba0861a6cc71122744847153a5059ab437f68d31d915dedc8df296ad037bc157f1d

  • SSDEEP

    12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZ59O:iM5j8Z3aKHx5r+TuxX+IwffFZ59O

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      087de26a39e65a6ea417783f0faaa43b

    • Size

      1.1MB

    • MD5

      087de26a39e65a6ea417783f0faaa43b

    • SHA1

      0880b8a9be0eacdec34609ceefbee81258287c77

    • SHA256

      fcb013af969eda15bcac41e895653ec5eea09ce6b08f3adbd40733c7564d4407

    • SHA512

      a4e86aa1198fc1c8d566fb042656aab08e2f2456d693751124e2a91f13f88ba0861a6cc71122744847153a5059ab437f68d31d915dedc8df296ad037bc157f1d

    • SSDEEP

      12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZ59O:iM5j8Z3aKHx5r+TuxX+IwffFZ59O

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks