Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    481fb96e3d6fff5d547d4e7c6e2026a3dd56395cab21e03e1ad367413f8a8d73

  • Size

    51KB

  • Sample

    240531-d7s1faeh98

  • MD5

    0ef83e69f8c2eb00faa1924ef2f79701

  • SHA1

    7a8b58e7421180eac08fa238d1e12c9456c983f3

  • SHA256

    481fb96e3d6fff5d547d4e7c6e2026a3dd56395cab21e03e1ad367413f8a8d73

  • SHA512

    583964af9c1e338866718da9e717f5ccac7465f84ce3bdfd61769a6b3787aff43cb003bfeed2a59efacdc26b34bd2c8859aaadd0e82662555a554429b68a94d4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLVJYH5:1dWubF3n9S91BF3fboRJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      481fb96e3d6fff5d547d4e7c6e2026a3dd56395cab21e03e1ad367413f8a8d73

    • Size

      51KB

    • MD5

      0ef83e69f8c2eb00faa1924ef2f79701

    • SHA1

      7a8b58e7421180eac08fa238d1e12c9456c983f3

    • SHA256

      481fb96e3d6fff5d547d4e7c6e2026a3dd56395cab21e03e1ad367413f8a8d73

    • SHA512

      583964af9c1e338866718da9e717f5ccac7465f84ce3bdfd61769a6b3787aff43cb003bfeed2a59efacdc26b34bd2c8859aaadd0e82662555a554429b68a94d4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLVJYH5:1dWubF3n9S91BF3fboRJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks