Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

230876a57d...18.exe

windows7-x64

10

230876a57d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    230876a57d507995553887fa1c603e14_JaffaCakes118

  • Size

    127KB

  • Sample

    240703-txqekathjp

  • MD5

    230876a57d507995553887fa1c603e14

  • SHA1

    3a2ae4d54f6ff85dad52267005c4dc09b4fc3c6e

  • SHA256

    cc0f7546d28bb46aa072e1a94e75221a8d00244cfa53b4afc9a0217d9da3395b

  • SHA512

    c2eddefd1f3d98d339c6141cea4564d8841cc99fa9166d39c38ec35f10316f6e3c54bbe1102ed9196dc5dadbe980976edcde98d0239afae2e41d9b6301d0aea8

  • SSDEEP

    3072:V7CaO7x8fC8t52oja+rKttHkoIIu6kfif20wNA:V7pON8ao++wKodjkqfXC

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      230876a57d507995553887fa1c603e14_JaffaCakes118

    • Size

      127KB

    • MD5

      230876a57d507995553887fa1c603e14

    • SHA1

      3a2ae4d54f6ff85dad52267005c4dc09b4fc3c6e

    • SHA256

      cc0f7546d28bb46aa072e1a94e75221a8d00244cfa53b4afc9a0217d9da3395b

    • SHA512

      c2eddefd1f3d98d339c6141cea4564d8841cc99fa9166d39c38ec35f10316f6e3c54bbe1102ed9196dc5dadbe980976edcde98d0239afae2e41d9b6301d0aea8

    • SSDEEP

      3072:V7CaO7x8fC8t52oja+rKttHkoIIu6kfif20wNA:V7pON8ao++wKodjkqfXC

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks