Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

83d8ce7bd4...aa.dll

windows7-x64

10

83d8ce7bd4...aa.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83d8ce7bd439c1314d3ec02559792187384bca6835b21aff127a21b6d06946aa

  • Size

    51KB

  • Sample

    240517-twfhzagb7y

  • MD5

    d2b10511637793e17d890d6febd1fe73

  • SHA1

    320f26ce773a9b275f19e1f0e3f39a1b851dc1a8

  • SHA256

    83d8ce7bd439c1314d3ec02559792187384bca6835b21aff127a21b6d06946aa

  • SHA512

    be52793edaff336683f6ea561b2ff57252a6e951439dcc3cd56a91e2368f3cd79cdf8cee6f59869fcfb71670d1f007e8aad4de96bb4d4935322b217c3c567fdb

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fbowJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      83d8ce7bd439c1314d3ec02559792187384bca6835b21aff127a21b6d06946aa

    • Size

      51KB

    • MD5

      d2b10511637793e17d890d6febd1fe73

    • SHA1

      320f26ce773a9b275f19e1f0e3f39a1b851dc1a8

    • SHA256

      83d8ce7bd439c1314d3ec02559792187384bca6835b21aff127a21b6d06946aa

    • SHA512

      be52793edaff336683f6ea561b2ff57252a6e951439dcc3cd56a91e2368f3cd79cdf8cee6f59869fcfb71670d1f007e8aad4de96bb4d4935322b217c3c567fdb

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fbowJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks