Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
20f9afa820f1c7020273ad4e3ae2dd09
-
Size
204KB
-
Sample
231225-qg73wsgger
-
MD5
20f9afa820f1c7020273ad4e3ae2dd09
-
SHA1
05ed7a52956a171588b09108476274433af5646f
-
SHA256
02d06fdca8fb779ebc10df2d2aab7e56cd6c512ee743ac29c463cbeb084d620c
-
SHA512
144fe021d16b2f5676d0a841c4474baf2aef78b978ad32d7deb0af51ab51a561e3a44db1371b6f43268d94db9af4ad78b56c7bb96ed76821b9f2757fa25b7c4f
-
SSDEEP
3072:frBaHAhAtPf6BWHWVXhqPEzO/V1VrNYQkCA+HFSWvF3TBftEnob2RI:DuAh/WHv9DNYtEHhvF3TBlEnob/
Behavioral task
behavioral1
Sample
20f9afa820f1c7020273ad4e3ae2dd09.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
20f9afa820f1c7020273ad4e3ae2dd09
-
Size
204KB
-
MD5
20f9afa820f1c7020273ad4e3ae2dd09
-
SHA1
05ed7a52956a171588b09108476274433af5646f
-
SHA256
02d06fdca8fb779ebc10df2d2aab7e56cd6c512ee743ac29c463cbeb084d620c
-
SHA512
144fe021d16b2f5676d0a841c4474baf2aef78b978ad32d7deb0af51ab51a561e3a44db1371b6f43268d94db9af4ad78b56c7bb96ed76821b9f2757fa25b7c4f
-
SSDEEP
3072:frBaHAhAtPf6BWHWVXhqPEzO/V1VrNYQkCA+HFSWvF3TBftEnob2RI:DuAh/WHv9DNYtEHhvF3TBlEnob/
Score10/10-
Gh0st RAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-