Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
678c16d06526898c5ec4082f317694975f6598ae6c873ecea71ab635998a1ffd
-
Size
13.9MB
-
Sample
240625-sc399azbrp
-
MD5
5b237b485d880e67c383635b45b5a57e
-
SHA1
bbc0d2185df5f00a212f1c52f67dd3d4ff335685
-
SHA256
678c16d06526898c5ec4082f317694975f6598ae6c873ecea71ab635998a1ffd
-
SHA512
0c3fd901452c07ef15f7ee05257414d7c64ea6cb69a39cce94fd2bf1f40475dd169bc4678440b1b58ff32ab5d9be36004d9cb9db2b7557f34709fe63bb7a4f87
-
SSDEEP
98304:6GdVyVT9nOgmhZ1wMGlz/3O7LMG+DOWYUcGG:JWT9nO7RLe/+7E1
Static task
static1
Behavioral task
behavioral1
Sample
678c16d06526898c5ec4082f317694975f6598ae6c873ecea71ab635998a1ffd.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
678c16d06526898c5ec4082f317694975f6598ae6c873ecea71ab635998a1ffd
-
Size
13.9MB
-
MD5
5b237b485d880e67c383635b45b5a57e
-
SHA1
bbc0d2185df5f00a212f1c52f67dd3d4ff335685
-
SHA256
678c16d06526898c5ec4082f317694975f6598ae6c873ecea71ab635998a1ffd
-
SHA512
0c3fd901452c07ef15f7ee05257414d7c64ea6cb69a39cce94fd2bf1f40475dd169bc4678440b1b58ff32ab5d9be36004d9cb9db2b7557f34709fe63bb7a4f87
-
SSDEEP
98304:6GdVyVT9nOgmhZ1wMGlz/3O7LMG+DOWYUcGG:JWT9nO7RLe/+7E1
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-