Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2e389fca5f...c0.exe

windows7-x64

10

2e389fca5f...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e389fca5fd7268bfed564c984ef9552d22629c482d9f88c8c122a5fbf9553c0.exe

  • Size

    384KB

  • Sample

    240613-snr2csybnj

  • MD5

    4ac39b4fd929d6f286da514bfa5adb04

  • SHA1

    ad628f53dda64f52f01b0a056cf4b8192a17e58f

  • SHA256

    2e389fca5fd7268bfed564c984ef9552d22629c482d9f88c8c122a5fbf9553c0

  • SHA512

    5c679c0c47be1b1fb96474ed0bfc40fac031ce27bc8512a7ca911481a82efeb6e67c75b6638492ec0f4b275b820ff208911408d36177ba4445af500908f6a2ef

  • SSDEEP

    6144:4Gyne2Ko9cK2OHnV7D2djek72aTALaFIm85ZDOFBjb/8o05NYXafC2IxFwD:Pm78gnV/2okya+bFOfv8t5NY12GF+

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      2e389fca5fd7268bfed564c984ef9552d22629c482d9f88c8c122a5fbf9553c0.exe

    • Size

      384KB

    • MD5

      4ac39b4fd929d6f286da514bfa5adb04

    • SHA1

      ad628f53dda64f52f01b0a056cf4b8192a17e58f

    • SHA256

      2e389fca5fd7268bfed564c984ef9552d22629c482d9f88c8c122a5fbf9553c0

    • SHA512

      5c679c0c47be1b1fb96474ed0bfc40fac031ce27bc8512a7ca911481a82efeb6e67c75b6638492ec0f4b275b820ff208911408d36177ba4445af500908f6a2ef

    • SSDEEP

      6144:4Gyne2Ko9cK2OHnV7D2djek72aTALaFIm85ZDOFBjb/8o05NYXafC2IxFwD:Pm78gnV/2okya+bFOfv8t5NY12GF+

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks