Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b170e40d47...18.dll

windows7-x64

10

b170e40d47...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b170e40d47a014f9803178cfef259391_JaffaCakes118

  • Size

    155KB

  • Sample

    240821-an5y4svbqj

  • MD5

    b170e40d47a014f9803178cfef259391

  • SHA1

    42e7c2052d509462a2310f32fa9c0ed54ded521c

  • SHA256

    fa16b3c1b58b4f354e66a04787fdc0c3e29342addcec16a9f3a168f5d4c395f2

  • SHA512

    44cbec6fe9f19f9a2914486f9be53f4029553558f75735ec3016b9af0a98826f6e5b4a8faa6846b8408974d7b3797481cced18eb215ce1c888945aa5c2c88ec5

  • SSDEEP

    3072:PBWHWVKhqPEzO/V1VrNYQkCA+HFSWvs3TBftrnob2i:5WHg9DNYtEHhvs3TBlrnobD

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      b170e40d47a014f9803178cfef259391_JaffaCakes118

    • Size

      155KB

    • MD5

      b170e40d47a014f9803178cfef259391

    • SHA1

      42e7c2052d509462a2310f32fa9c0ed54ded521c

    • SHA256

      fa16b3c1b58b4f354e66a04787fdc0c3e29342addcec16a9f3a168f5d4c395f2

    • SHA512

      44cbec6fe9f19f9a2914486f9be53f4029553558f75735ec3016b9af0a98826f6e5b4a8faa6846b8408974d7b3797481cced18eb215ce1c888945aa5c2c88ec5

    • SSDEEP

      3072:PBWHWVKhqPEzO/V1VrNYQkCA+HFSWvs3TBftrnob2i:5WHg9DNYtEHhvs3TBlrnobD

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks