Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0b4eb7fdae7e90c0bd0dbfc7552865ba6d7dcd03e77efd91b5e246c71f9f2f7c.exe
-
Size
372KB
-
Sample
240128-gb96maecaq
-
MD5
3b9e3e850933caa9003654132483c904
-
SHA1
c0dd579af79831b5b6ae5e0926f990d992143525
-
SHA256
c175bbf9c53bb397bf54555e30f34b9ee069682d71301e01dd8bda74615e58eb
-
SHA512
1329cf083a89ea16983d54b09e720c9d22e9718f2f0ff5c3266aabd4fd6841bc467dd620fa429d9d244bdea7d19e3533ff98c7203c8310e9a1f4f4b8187e80b2
-
SSDEEP
3072:fIXcNc8ES3qngZt/ET+rL+aIy8dGv5FqEPPVG5ZGsnWznKr/00:fIMNc8ESDZVLACbP05Uaxc0
Static task
static1
Behavioral task
behavioral1
Sample
0b4eb7fdae7e90c0bd0dbfc7552865ba6d7dcd03e77efd91b5e246c71f9f2f7c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b4eb7fdae7e90c0bd0dbfc7552865ba6d7dcd03e77efd91b5e246c71f9f2f7c.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
gh0strat
182.42.105.12
Targets
-
-
Target
0b4eb7fdae7e90c0bd0dbfc7552865ba6d7dcd03e77efd91b5e246c71f9f2f7c.exe
-
Size
372KB
-
MD5
3b9e3e850933caa9003654132483c904
-
SHA1
c0dd579af79831b5b6ae5e0926f990d992143525
-
SHA256
c175bbf9c53bb397bf54555e30f34b9ee069682d71301e01dd8bda74615e58eb
-
SHA512
1329cf083a89ea16983d54b09e720c9d22e9718f2f0ff5c3266aabd4fd6841bc467dd620fa429d9d244bdea7d19e3533ff98c7203c8310e9a1f4f4b8187e80b2
-
SSDEEP
3072:fIXcNc8ES3qngZt/ET+rL+aIy8dGv5FqEPPVG5ZGsnWznKr/00:fIMNc8ESDZVLACbP05Uaxc0
Score10/10-
Gh0st RAT payload
-
Executes dropped EXE
-
Adds Run key to start application
-