Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4164815b62006d235eb17a0b444fda5e7dcc5aeba94bff356cc2a6d81d0bb51b

  • Size

    899KB

  • Sample

    240428-ph9gnsff57

  • MD5

    d75e0ece68bd48392789883a202f0c1f

  • SHA1

    7d950d2a03808fc757894aab712df0164bb55541

  • SHA256

    4164815b62006d235eb17a0b444fda5e7dcc5aeba94bff356cc2a6d81d0bb51b

  • SHA512

    12390cdc263b91d010a4bdcd630c8876fc1b2e6a371a5b5e089081037f7cba650f806eac62e90cd452a1f447420f8d474c22734a04483197500f956732d5b237

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4164815b62006d235eb17a0b444fda5e7dcc5aeba94bff356cc2a6d81d0bb51b

    • Size

      899KB

    • MD5

      d75e0ece68bd48392789883a202f0c1f

    • SHA1

      7d950d2a03808fc757894aab712df0164bb55541

    • SHA256

      4164815b62006d235eb17a0b444fda5e7dcc5aeba94bff356cc2a6d81d0bb51b

    • SHA512

      12390cdc263b91d010a4bdcd630c8876fc1b2e6a371a5b5e089081037f7cba650f806eac62e90cd452a1f447420f8d474c22734a04483197500f956732d5b237

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks