Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
626141fa923c5bcb3d9e59ccc3d51ca08a30f947b8ae2d5b6015381a5b0ce55c
-
Size
4.8MB
-
Sample
240110-mk17zaeeh6
-
MD5
106e59dabc31a5abda6b9eb7d42762b7
-
SHA1
222a040804cc0a52a01c140dec848c39313d6fa8
-
SHA256
626141fa923c5bcb3d9e59ccc3d51ca08a30f947b8ae2d5b6015381a5b0ce55c
-
SHA512
3f65c44d2e23bcfe29ef574feb432866354d85c45f6475d080fb720f8377dd437462bebb2b5a6b3176e4018500164e1647db297123bd633e684c63d3e2523ff7
-
SSDEEP
12288:m754tgqaFS50+hMXSOwuFAmErTi9Z7ljVHRRHznQXpf2k/MbRz+8TZgE6L9O46Yl:mt44S50bxAmE3i9ZlVHMfEdz+xEil
Static task
static1
Behavioral task
behavioral1
Sample
626141fa923c5bcb3d9e59ccc3d51ca08a30f947b8ae2d5b6015381a5b0ce55c.exe
Resource
win7-20231215-en
Malware Config
Extracted
gh0strat
43.143.116.23
Targets
-
-
Target
626141fa923c5bcb3d9e59ccc3d51ca08a30f947b8ae2d5b6015381a5b0ce55c
-
Size
4.8MB
-
MD5
106e59dabc31a5abda6b9eb7d42762b7
-
SHA1
222a040804cc0a52a01c140dec848c39313d6fa8
-
SHA256
626141fa923c5bcb3d9e59ccc3d51ca08a30f947b8ae2d5b6015381a5b0ce55c
-
SHA512
3f65c44d2e23bcfe29ef574feb432866354d85c45f6475d080fb720f8377dd437462bebb2b5a6b3176e4018500164e1647db297123bd633e684c63d3e2523ff7
-
SSDEEP
12288:m754tgqaFS50+hMXSOwuFAmErTi9Z7ljVHRRHznQXpf2k/MbRz+8TZgE6L9O46Yl:mt44S50bxAmE3i9ZlVHMfEdz+xEil
-
Gh0st RAT payload
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-