Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    effaa7a95a064c025dccc197649ac9b84ee3b046907682b3bd7972a558d6fb8a

  • Size

    51KB

  • Sample

    240531-e6n6jafb3t

  • MD5

    1ba301958b51f3d86670a59e920f8fe3

  • SHA1

    190cb340d9cd2660e47816f9a45bd75f61e4a8df

  • SHA256

    effaa7a95a064c025dccc197649ac9b84ee3b046907682b3bd7972a558d6fb8a

  • SHA512

    ddc6d0e0e948a554421ebc1297db2f3697cbd7d42b2165a9602e5129968e7efc6541a55d7ee0209137a07ceed8b867b2483d9a81b1b5e5a19f7b8f2adce05e6d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fbolJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      effaa7a95a064c025dccc197649ac9b84ee3b046907682b3bd7972a558d6fb8a

    • Size

      51KB

    • MD5

      1ba301958b51f3d86670a59e920f8fe3

    • SHA1

      190cb340d9cd2660e47816f9a45bd75f61e4a8df

    • SHA256

      effaa7a95a064c025dccc197649ac9b84ee3b046907682b3bd7972a558d6fb8a

    • SHA512

      ddc6d0e0e948a554421ebc1297db2f3697cbd7d42b2165a9602e5129968e7efc6541a55d7ee0209137a07ceed8b867b2483d9a81b1b5e5a19f7b8f2adce05e6d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fbolJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks