Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d08dc4c482...62.dll

windows7-x64

10

d08dc4c482...62.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d08dc4c482ab7c1aa15b37e6b7a5184fe841b7aa6d276495747ee319edec0f62

  • Size

    8.6MB

  • Sample

    250311-fx4ejatvb1

  • MD5

    7f588a286a904cdf12cec9e71ea652a1

  • SHA1

    e890d763f08393e47c38edeb78373b03192d8bb9

  • SHA256

    d08dc4c482ab7c1aa15b37e6b7a5184fe841b7aa6d276495747ee319edec0f62

  • SHA512

    915a9a5861b7293d02de3b0fc6f562658c5a8e27580393b439ded020e8dc7015cc413d13b59e2f1065ed5feb96f2d56995aa91f4f3b2896f1931818f6c1e84c3

  • SSDEEP

    12288:WbR1NooooooooooooooooooooooooooooooooooooooooooooooooooooooooooX:W11q+

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      d08dc4c482ab7c1aa15b37e6b7a5184fe841b7aa6d276495747ee319edec0f62

    • Size

      8.6MB

    • MD5

      7f588a286a904cdf12cec9e71ea652a1

    • SHA1

      e890d763f08393e47c38edeb78373b03192d8bb9

    • SHA256

      d08dc4c482ab7c1aa15b37e6b7a5184fe841b7aa6d276495747ee319edec0f62

    • SHA512

      915a9a5861b7293d02de3b0fc6f562658c5a8e27580393b439ded020e8dc7015cc413d13b59e2f1065ed5feb96f2d56995aa91f4f3b2896f1931818f6c1e84c3

    • SSDEEP

      12288:WbR1NooooooooooooooooooooooooooooooooooooooooooooooooooooooooooX:W11q+

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks