Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ecb07db35b4abe751e587d561bfdf49d40f301de5a619fc0ecc6a7b97a55b45c
-
Size
2.3MB
-
Sample
240314-wkcn2sch69
-
MD5
c2136ed84bf13d025e3a9e17873375b8
-
SHA1
1e8f7e846565c3b7c8c76de5961f26dd792683dd
-
SHA256
ecb07db35b4abe751e587d561bfdf49d40f301de5a619fc0ecc6a7b97a55b45c
-
SHA512
e4b9f643fc2eab7f2df9f6f40c8f0f9a951d8e7b6e89661baef7435679ee74b5ffb511f6350f11140958af05081befd2accf375f7547c9e252e6d9138b2e47ad
-
SSDEEP
24576:6CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHd:6CwsbCANnKXferL7Vwe/Gg0P+Wh3u
Static task
static1
Behavioral task
behavioral1
Sample
ecb07db35b4abe751e587d561bfdf49d40f301de5a619fc0ecc6a7b97a55b45c.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
ecb07db35b4abe751e587d561bfdf49d40f301de5a619fc0ecc6a7b97a55b45c
-
Size
2.3MB
-
MD5
c2136ed84bf13d025e3a9e17873375b8
-
SHA1
1e8f7e846565c3b7c8c76de5961f26dd792683dd
-
SHA256
ecb07db35b4abe751e587d561bfdf49d40f301de5a619fc0ecc6a7b97a55b45c
-
SHA512
e4b9f643fc2eab7f2df9f6f40c8f0f9a951d8e7b6e89661baef7435679ee74b5ffb511f6350f11140958af05081befd2accf375f7547c9e252e6d9138b2e47ad
-
SSDEEP
24576:6CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHd:6CwsbCANnKXferL7Vwe/Gg0P+Wh3u
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-