Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ace87b1f250a49c813a301691a68f3bc6225171ecbca379274e7ae8daffb1e59
-
Size
2.6MB
-
Sample
240418-eck7saab46
-
MD5
46ea24182cc4a6cbe2ac6123baf0ca90
-
SHA1
f12eb1ae8cf2533a80b01f1820b3f1cc3b7994fb
-
SHA256
ace87b1f250a49c813a301691a68f3bc6225171ecbca379274e7ae8daffb1e59
-
SHA512
814c2978c2c0815dd035719d2c16b5cc5952a91059e9434bd0f65b2e8d267797c0fe4640487d5b518b8b96154c8013f884d9384bed9cb840cf34ce6573d0d3f9
-
SSDEEP
24576:yCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:yCwsbCANnKXferL7Vwe/Gg0P+WhP
Static task
static1
Behavioral task
behavioral1
Sample
ace87b1f250a49c813a301691a68f3bc6225171ecbca379274e7ae8daffb1e59.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
ace87b1f250a49c813a301691a68f3bc6225171ecbca379274e7ae8daffb1e59
-
Size
2.6MB
-
MD5
46ea24182cc4a6cbe2ac6123baf0ca90
-
SHA1
f12eb1ae8cf2533a80b01f1820b3f1cc3b7994fb
-
SHA256
ace87b1f250a49c813a301691a68f3bc6225171ecbca379274e7ae8daffb1e59
-
SHA512
814c2978c2c0815dd035719d2c16b5cc5952a91059e9434bd0f65b2e8d267797c0fe4640487d5b518b8b96154c8013f884d9384bed9cb840cf34ce6573d0d3f9
-
SSDEEP
24576:yCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:yCwsbCANnKXferL7Vwe/Gg0P+WhP
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-