Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8c385106f2acdb5958abc3b808e540d162fe9c8f4a7d3c35f2f03bdde5c52825
-
Size
539KB
-
Sample
240118-nvyehabea5
-
MD5
f2d86e6703e7706174e887936571d7d4
-
SHA1
1f2377bd479e7fe584cbab253b29b37d4f767b36
-
SHA256
8c385106f2acdb5958abc3b808e540d162fe9c8f4a7d3c35f2f03bdde5c52825
-
SHA512
9d7bdf72a52c4041469c9380d9a7d8c29d21a05e64710547c2d542991a1356a7c10cc4a429d753e772b571fb884b5687b70b3eb94ee7ceb403df30f13f73341e
-
SSDEEP
12288:NhymnwJFPNdgBAEHApqePJN1AmLM7uVq9sSAL:NUmwrl2Ao7sJNlM7ymsSA
Behavioral task
behavioral1
Sample
8c385106f2acdb5958abc3b808e540d162fe9c8f4a7d3c35f2f03bdde5c52825.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
8c385106f2acdb5958abc3b808e540d162fe9c8f4a7d3c35f2f03bdde5c52825
-
Size
539KB
-
MD5
f2d86e6703e7706174e887936571d7d4
-
SHA1
1f2377bd479e7fe584cbab253b29b37d4f767b36
-
SHA256
8c385106f2acdb5958abc3b808e540d162fe9c8f4a7d3c35f2f03bdde5c52825
-
SHA512
9d7bdf72a52c4041469c9380d9a7d8c29d21a05e64710547c2d542991a1356a7c10cc4a429d753e772b571fb884b5687b70b3eb94ee7ceb403df30f13f73341e
-
SSDEEP
12288:NhymnwJFPNdgBAEHApqePJN1AmLM7uVq9sSAL:NUmwrl2Ao7sJNlM7ymsSA
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-