Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ba8c5a1c56...5a.dll

windows7-x64

10

ba8c5a1c56...5a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba8c5a1c56345ddbf8afe86f5c2677bb35205efd3591d3013d256bfc3a23e65a

  • Size

    51KB

  • Sample

    240514-295zsadh83

  • MD5

    e9aa451ab180deb12be35c7f73dfa7bb

  • SHA1

    7b5c58120ddadc801899c9c93c92c31c491886ff

  • SHA256

    ba8c5a1c56345ddbf8afe86f5c2677bb35205efd3591d3013d256bfc3a23e65a

  • SHA512

    8f8186162803fe1ee278e0338a7a2d56c14f663975cb5e6290578112b74c94a2a8b940658694c618a63a91aea962c226bcc57074ba6223770146c1a8a9e30141

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ba8c5a1c56345ddbf8afe86f5c2677bb35205efd3591d3013d256bfc3a23e65a

    • Size

      51KB

    • MD5

      e9aa451ab180deb12be35c7f73dfa7bb

    • SHA1

      7b5c58120ddadc801899c9c93c92c31c491886ff

    • SHA256

      ba8c5a1c56345ddbf8afe86f5c2677bb35205efd3591d3013d256bfc3a23e65a

    • SHA512

      8f8186162803fe1ee278e0338a7a2d56c14f663975cb5e6290578112b74c94a2a8b940658694c618a63a91aea962c226bcc57074ba6223770146c1a8a9e30141

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks