Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

225e95bd26...18.exe

windows7-x64

10

225e95bd26...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    225e95bd26c00784d5381dc7b927befc_JaffaCakes118

  • Size

    496KB

  • Sample

    240703-pfty7stela

  • MD5

    225e95bd26c00784d5381dc7b927befc

  • SHA1

    4f03d52d666e43f83260c0b2fd342a4cdadf6f3a

  • SHA256

    cc9a06b029760bf0525455cd66331d8e653cba7d2b4aaa4633e8590ca4a2ad2a

  • SHA512

    b97bb416f6216478d580d76eb84e119fa32bc40a99e94968a65fca5291c94e8fb629d60d0bd723f4ef6453f2287ac5f3d10ca7c16d1c4aab074339a554a6269c

  • SSDEEP

    12288:SM5HAC52oxL3aKHx5r+TuxPhNWwgsAO3ot3Q:SM5HAC0w3aKHx5r+TuxPhpgpOm3Q

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      225e95bd26c00784d5381dc7b927befc_JaffaCakes118

    • Size

      496KB

    • MD5

      225e95bd26c00784d5381dc7b927befc

    • SHA1

      4f03d52d666e43f83260c0b2fd342a4cdadf6f3a

    • SHA256

      cc9a06b029760bf0525455cd66331d8e653cba7d2b4aaa4633e8590ca4a2ad2a

    • SHA512

      b97bb416f6216478d580d76eb84e119fa32bc40a99e94968a65fca5291c94e8fb629d60d0bd723f4ef6453f2287ac5f3d10ca7c16d1c4aab074339a554a6269c

    • SSDEEP

      12288:SM5HAC52oxL3aKHx5r+TuxPhNWwgsAO3ot3Q:SM5HAC0w3aKHx5r+TuxPhpgpOm3Q

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks