Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3380c2d9571885167a4f38ad04695d4d26ab7627714944d773a82fc0f29c6db1
-
Size
2.9MB
-
Sample
240625-v6evvswdlm
-
MD5
89930dfbf808ff7f489d8744c1f73713
-
SHA1
d49de01c6d75989b326ac1bb829cccb61527f4e2
-
SHA256
3380c2d9571885167a4f38ad04695d4d26ab7627714944d773a82fc0f29c6db1
-
SHA512
c505faf6610354c2d2c81ebc0610dc0564a14c603ace68afc87f7c0e4be0e7cc4498c48bbf2e7e23614a4be2e3f70d6517ae6179e380ebdf30b76b72dba4b7af
-
SSDEEP
24576:zCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:zCwsbCANnKXferL7Vwe/Gg0P+WhBTF82
Static task
static1
Behavioral task
behavioral1
Sample
3380c2d9571885167a4f38ad04695d4d26ab7627714944d773a82fc0f29c6db1.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
3380c2d9571885167a4f38ad04695d4d26ab7627714944d773a82fc0f29c6db1
-
Size
2.9MB
-
MD5
89930dfbf808ff7f489d8744c1f73713
-
SHA1
d49de01c6d75989b326ac1bb829cccb61527f4e2
-
SHA256
3380c2d9571885167a4f38ad04695d4d26ab7627714944d773a82fc0f29c6db1
-
SHA512
c505faf6610354c2d2c81ebc0610dc0564a14c603ace68afc87f7c0e4be0e7cc4498c48bbf2e7e23614a4be2e3f70d6517ae6179e380ebdf30b76b72dba4b7af
-
SSDEEP
24576:zCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:zCwsbCANnKXferL7Vwe/Gg0P+WhBTF82
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-