Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
eb7ea787601bf9cd644b6756db249a1c53f92a8552c1d4642d310c650b1c5e42
-
Size
440KB
-
Sample
240903-vjabvs1frq
-
MD5
f15baba91b0737d6dc709d94ba911b50
-
SHA1
e5e03d3569ca86314939a179779aea12528e6dcf
-
SHA256
eb7ea787601bf9cd644b6756db249a1c53f92a8552c1d4642d310c650b1c5e42
-
SHA512
7b393520a63513b3a399b966d259de78072b30eea0c043bc3b560878e5069fd2ce80c11f8885ab9db7b9eea855451e2d24f412d44fd7c505b6ddf4c7497ea7ba
-
SSDEEP
3072:c2VdsaO1zWimMW8uZFij77tqjDAas6MgxvRzt7DBAw1BHn:Ka+aDA8HAas6MGZtnBTD
Behavioral task
behavioral1
Sample
eb7ea787601bf9cd644b6756db249a1c53f92a8552c1d4642d310c650b1c5e42.exe
Resource
win7-20240903-en
Malware Config
Extracted
gh0strat
qq.qqppf.com
Targets
-
-
Target
eb7ea787601bf9cd644b6756db249a1c53f92a8552c1d4642d310c650b1c5e42
-
Size
440KB
-
MD5
f15baba91b0737d6dc709d94ba911b50
-
SHA1
e5e03d3569ca86314939a179779aea12528e6dcf
-
SHA256
eb7ea787601bf9cd644b6756db249a1c53f92a8552c1d4642d310c650b1c5e42
-
SHA512
7b393520a63513b3a399b966d259de78072b30eea0c043bc3b560878e5069fd2ce80c11f8885ab9db7b9eea855451e2d24f412d44fd7c505b6ddf4c7497ea7ba
-
SSDEEP
3072:c2VdsaO1zWimMW8uZFij77tqjDAas6MgxvRzt7DBAw1BHn:Ka+aDA8HAas6MGZtnBTD
-
Gh0st RAT payload
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-