Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cbce14921adf95d7682fe6cd495e0a18c0e270814973e5bcc3ae49a2269da7d2

  • Size

    51KB

  • Sample

    240531-e585bafa9z

  • MD5

    fd46aa1f6813abe096719f6d40807d2f

  • SHA1

    b996ffea72e84e252eca45bde49c1b7e8a6868b8

  • SHA256

    cbce14921adf95d7682fe6cd495e0a18c0e270814973e5bcc3ae49a2269da7d2

  • SHA512

    1524d5c5e0a203ab16030e8ca228fd3965626b623d77bad5d90a986f6bf33471d045c271575919c48df27a4231ce9335777cc6cda0a61fa35f1b2fb0d0b2fa94

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLsJYH5:1dWubF3n9S91BF3fbowJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      cbce14921adf95d7682fe6cd495e0a18c0e270814973e5bcc3ae49a2269da7d2

    • Size

      51KB

    • MD5

      fd46aa1f6813abe096719f6d40807d2f

    • SHA1

      b996ffea72e84e252eca45bde49c1b7e8a6868b8

    • SHA256

      cbce14921adf95d7682fe6cd495e0a18c0e270814973e5bcc3ae49a2269da7d2

    • SHA512

      1524d5c5e0a203ab16030e8ca228fd3965626b623d77bad5d90a986f6bf33471d045c271575919c48df27a4231ce9335777cc6cda0a61fa35f1b2fb0d0b2fa94

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLsJYH5:1dWubF3n9S91BF3fbowJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks