Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a
-
Size
1.5MB
-
Sample
240529-cptnksfd62
-
MD5
368b1000c51f63159c92fbd894b87f9d
-
SHA1
cd302c577c556b779c6e06a763602e316e481de6
-
SHA256
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a
-
SHA512
6997db48152be1f35c51b03b16c2fe8de0d5a620c652ec86be750b6eb4b5f464ca0e1b3f3b532da0f96f35016addf1557fb4f9bf36e5db3a459df38501f7100e
-
SSDEEP
24576:tYFbkIsaPiXSVnC7Yp9zkNmZG8RRlnqyzf:tYREXSVMDi3F
Static task
static1
Behavioral task
behavioral1
Sample
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a
-
Size
1.5MB
-
MD5
368b1000c51f63159c92fbd894b87f9d
-
SHA1
cd302c577c556b779c6e06a763602e316e481de6
-
SHA256
871cb8a6dc202086c9d4225fb60dafacb0fe1118ab0657a12fa2b91acaeb522a
-
SHA512
6997db48152be1f35c51b03b16c2fe8de0d5a620c652ec86be750b6eb4b5f464ca0e1b3f3b532da0f96f35016addf1557fb4f9bf36e5db3a459df38501f7100e
-
SSDEEP
24576:tYFbkIsaPiXSVnC7Yp9zkNmZG8RRlnqyzf:tYREXSVMDi3F
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-