Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    82f901820cff16194ba325ff78933ace1c4ed75d95dbfa03863ac7987e094377

  • Size

    899KB

  • Sample

    240530-cks69abf93

  • MD5

    058e01402ed82bdfa7d196f55e2d4adc

  • SHA1

    b0a22badecb5a61bf9111bdca10ec64afc07e062

  • SHA256

    82f901820cff16194ba325ff78933ace1c4ed75d95dbfa03863ac7987e094377

  • SHA512

    97de5fa07fc93bfe8c4488081e6ac1f19ba3c9a2ed412b8908236dc4a8afed32d235b03bc439cfbe85a9a6bb27c1f6845715d172c277488f443bd404e2fbc0c0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXy:7wqd87Vy

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      82f901820cff16194ba325ff78933ace1c4ed75d95dbfa03863ac7987e094377

    • Size

      899KB

    • MD5

      058e01402ed82bdfa7d196f55e2d4adc

    • SHA1

      b0a22badecb5a61bf9111bdca10ec64afc07e062

    • SHA256

      82f901820cff16194ba325ff78933ace1c4ed75d95dbfa03863ac7987e094377

    • SHA512

      97de5fa07fc93bfe8c4488081e6ac1f19ba3c9a2ed412b8908236dc4a8afed32d235b03bc439cfbe85a9a6bb27c1f6845715d172c277488f443bd404e2fbc0c0

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXy:7wqd87Vy

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks