Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a0d70c2fb2d63168b6c93c272362a29e525bcd597a6e7bd5541e88c2ec886ba8
-
Size
2.5MB
-
Sample
240526-plkmqada24
-
MD5
1a855b5395347374906f94d37daa2a66
-
SHA1
7bf4c5dad25f12f6f24c155334c9266f28834160
-
SHA256
a0d70c2fb2d63168b6c93c272362a29e525bcd597a6e7bd5541e88c2ec886ba8
-
SHA512
51e52caa3be35622d34f0dbfb28b8e0cbfafe8dbddf17916cf52291c0acb5f63dac81bf947b13a3a0402e7496a4a67cb0d5e5dedc1427b90db8725c4b3934a17
-
SSDEEP
24576:8CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHx:8CwsbCANnKXferL7Vwe/Gg0P+WhFA
Static task
static1
Behavioral task
behavioral1
Sample
a0d70c2fb2d63168b6c93c272362a29e525bcd597a6e7bd5541e88c2ec886ba8.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
a0d70c2fb2d63168b6c93c272362a29e525bcd597a6e7bd5541e88c2ec886ba8
-
Size
2.5MB
-
MD5
1a855b5395347374906f94d37daa2a66
-
SHA1
7bf4c5dad25f12f6f24c155334c9266f28834160
-
SHA256
a0d70c2fb2d63168b6c93c272362a29e525bcd597a6e7bd5541e88c2ec886ba8
-
SHA512
51e52caa3be35622d34f0dbfb28b8e0cbfafe8dbddf17916cf52291c0acb5f63dac81bf947b13a3a0402e7496a4a67cb0d5e5dedc1427b90db8725c4b3934a17
-
SSDEEP
24576:8CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHx:8CwsbCANnKXferL7Vwe/Gg0P+WhFA
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-