Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f6adb37383...22.dll

windows7-x64

10

f6adb37383...22.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6adb37383d25723fe092c383dbe7abf43e1097140fc15b3fdbf189caf172f22

  • Size

    51KB

  • Sample

    240524-fq8qnsee7t

  • MD5

    059a8c67b1501bfcfa238690e3723def

  • SHA1

    e52a5b9e718ccc6e1d2ad10caae341201eb2a836

  • SHA256

    f6adb37383d25723fe092c383dbe7abf43e1097140fc15b3fdbf189caf172f22

  • SHA512

    3191e8727d88c41194c7eca921f3274c71b8d5bc1488dc5b45012b7b8310d99d1dc9705ea59f675065adead31a2fdb70f878f7133112a55fcb76853bd8b09e86

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboCJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f6adb37383d25723fe092c383dbe7abf43e1097140fc15b3fdbf189caf172f22

    • Size

      51KB

    • MD5

      059a8c67b1501bfcfa238690e3723def

    • SHA1

      e52a5b9e718ccc6e1d2ad10caae341201eb2a836

    • SHA256

      f6adb37383d25723fe092c383dbe7abf43e1097140fc15b3fdbf189caf172f22

    • SHA512

      3191e8727d88c41194c7eca921f3274c71b8d5bc1488dc5b45012b7b8310d99d1dc9705ea59f675065adead31a2fdb70f878f7133112a55fcb76853bd8b09e86

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboCJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks