Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
85372d5b236a299db7c90b08b04985836094b2335ada801285bce028df9f29ad
-
Size
2.6MB
-
Sample
240526-stvpfabh67
-
MD5
b7ab152e368ea6fe0d229abe91990339
-
SHA1
2c1311fff35a9a787b537902d996779dea890a39
-
SHA256
85372d5b236a299db7c90b08b04985836094b2335ada801285bce028df9f29ad
-
SHA512
14d35c3ed86c857ea03615de2211ed5e0480a3207cec35e1aab58f00b274b99d47b5e9b0a0ae2f624a6e738a3ee850292a5c091799d8bddbdce2a4e21d97c7ef
-
SSDEEP
24576:ECwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHg:ECwsbCANnKXferL7Vwe/Gg0P+WhHBgq
Static task
static1
Behavioral task
behavioral1
Sample
85372d5b236a299db7c90b08b04985836094b2335ada801285bce028df9f29ad.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
85372d5b236a299db7c90b08b04985836094b2335ada801285bce028df9f29ad
-
Size
2.6MB
-
MD5
b7ab152e368ea6fe0d229abe91990339
-
SHA1
2c1311fff35a9a787b537902d996779dea890a39
-
SHA256
85372d5b236a299db7c90b08b04985836094b2335ada801285bce028df9f29ad
-
SHA512
14d35c3ed86c857ea03615de2211ed5e0480a3207cec35e1aab58f00b274b99d47b5e9b0a0ae2f624a6e738a3ee850292a5c091799d8bddbdce2a4e21d97c7ef
-
SSDEEP
24576:ECwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHg:ECwsbCANnKXferL7Vwe/Gg0P+WhHBgq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-