Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

db2a054da3...1f.dll

windows7-x64

10

db2a054da3...1f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db2a054da3a788699f9725a1b65e27488a8a5ec010f652866833f2a03f81511f

  • Size

    899KB

  • Sample

    240504-xzr8qaga7w

  • MD5

    c58e17a706af7e8feea55e5980072f4d

  • SHA1

    43d9b3985589eb1201b8499b035000f0fc15b02d

  • SHA256

    db2a054da3a788699f9725a1b65e27488a8a5ec010f652866833f2a03f81511f

  • SHA512

    039656aea480e755e795da7f6210c2eb345fe85b1ef117d9cfb83a03dd9d96057a3974860f73ad421953ee055161100ffa98860569823a2b644a2458b364178f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      db2a054da3a788699f9725a1b65e27488a8a5ec010f652866833f2a03f81511f

    • Size

      899KB

    • MD5

      c58e17a706af7e8feea55e5980072f4d

    • SHA1

      43d9b3985589eb1201b8499b035000f0fc15b02d

    • SHA256

      db2a054da3a788699f9725a1b65e27488a8a5ec010f652866833f2a03f81511f

    • SHA512

      039656aea480e755e795da7f6210c2eb345fe85b1ef117d9cfb83a03dd9d96057a3974860f73ad421953ee055161100ffa98860569823a2b644a2458b364178f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks