Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

system.exe

windows7-x64

10

system.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    system.exe

  • Size

    14.2MB

  • Sample

    240617-ey8vzayaqm

  • MD5

    b79c7a3ce694f09a0b4aaa70a4c9fd29

  • SHA1

    3764f7d52a7e6524aee9d37318ee17320aeceede

  • SHA256

    d390da62f1e8d55a5ebbb805bce89ba3036d05950684a1ac3e57ef011d08b31a

  • SHA512

    3b9c2174af3de3c3e749b6a6df79d43634ae72b42f145452ad8d67a7afa99e06a474e7cbba30279f1915ba3bc926ed5700552baa7a530e90c5ec553721ba35b4

  • SSDEEP

    393216:0HcgjmZZqbPmYRQK7+TvFDbQlNvoNG31QF7+okgc:GjmXqbrRQRvFDbKB1Iqx

Score
10/10
gh0stratpyinstallerrat

Malware Config

Extracted

Family

gh0strat

C2

18.143.169.29

Targets

    • Target

      system.exe

    • Size

      14.2MB

    • MD5

      b79c7a3ce694f09a0b4aaa70a4c9fd29

    • SHA1

      3764f7d52a7e6524aee9d37318ee17320aeceede

    • SHA256

      d390da62f1e8d55a5ebbb805bce89ba3036d05950684a1ac3e57ef011d08b31a

    • SHA512

      3b9c2174af3de3c3e749b6a6df79d43634ae72b42f145452ad8d67a7afa99e06a474e7cbba30279f1915ba3bc926ed5700552baa7a530e90c5ec553721ba35b4

    • SSDEEP

      393216:0HcgjmZZqbPmYRQK7+TvFDbQlNvoNG31QF7+okgc:GjmXqbrRQRvFDbKB1Iqx

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks