Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

43eab5ac3e...18.exe

windows7-x64

10

43eab5ac3e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43eab5ac3e410be2e2b33fdda697a07c_JaffaCakes118

  • Size

    384KB

  • Sample

    240714-ct4pcatapn

  • MD5

    43eab5ac3e410be2e2b33fdda697a07c

  • SHA1

    400f9c04d83453c136ddc26072a99d6c8a293a4b

  • SHA256

    dd4c2112a177fa4efc3b361526d81bae3252dae5c881ad7209fe4d99d514188c

  • SHA512

    3bdb55b62df2c04905dfe46a03230fc2d53eed1cda0a005c141360a3a94a31070bbb0827ce753b23eda48d1fecb62bc29a94988b94a1e943d8d9a09d19770e58

  • SSDEEP

    12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOf:KPBjK8VlYb3P9F7

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      43eab5ac3e410be2e2b33fdda697a07c_JaffaCakes118

    • Size

      384KB

    • MD5

      43eab5ac3e410be2e2b33fdda697a07c

    • SHA1

      400f9c04d83453c136ddc26072a99d6c8a293a4b

    • SHA256

      dd4c2112a177fa4efc3b361526d81bae3252dae5c881ad7209fe4d99d514188c

    • SHA512

      3bdb55b62df2c04905dfe46a03230fc2d53eed1cda0a005c141360a3a94a31070bbb0827ce753b23eda48d1fecb62bc29a94988b94a1e943d8d9a09d19770e58

    • SSDEEP

      12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOf:KPBjK8VlYb3P9F7

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks