Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    284952539cc1075e3a74d343a008296bb48673b07f4e6c91468d8dbdcf974158

  • Size

    899KB

  • Sample

    240530-h535vabe76

  • MD5

    050dfb4344c74a7c3d72801ee0b23b1b

  • SHA1

    21aca99be335d937ba36b7211def720f341a19b4

  • SHA256

    284952539cc1075e3a74d343a008296bb48673b07f4e6c91468d8dbdcf974158

  • SHA512

    bcc6764440d141966ea9316f4fc8140051e0a60d4655431ea14839f19d6edbd6e3c5f746d86887ee14d7d665b8708d118e27a47581476c729d2c74c1c628ef96

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      284952539cc1075e3a74d343a008296bb48673b07f4e6c91468d8dbdcf974158

    • Size

      899KB

    • MD5

      050dfb4344c74a7c3d72801ee0b23b1b

    • SHA1

      21aca99be335d937ba36b7211def720f341a19b4

    • SHA256

      284952539cc1075e3a74d343a008296bb48673b07f4e6c91468d8dbdcf974158

    • SHA512

      bcc6764440d141966ea9316f4fc8140051e0a60d4655431ea14839f19d6edbd6e3c5f746d86887ee14d7d665b8708d118e27a47581476c729d2c74c1c628ef96

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks