Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0f57c97e9ab1d28778f6487776042d9921bd51862d2c8a81c1388a254819eb6c

  • Size

    51KB

  • Sample

    240531-f6taxsge9y

  • MD5

    2f23ca871a344f3eaa5c1e17564203e0

  • SHA1

    e3ea86b17190f4062d028a4229d67c69b72cc37b

  • SHA256

    0f57c97e9ab1d28778f6487776042d9921bd51862d2c8a81c1388a254819eb6c

  • SHA512

    b435cf1ba209fc4a42d1db7920fb1b758b3fe4a7e3b5261ddda99bd6fa35863d5dc652e0efbf3719a601720d7bc214fe2f112b039ebb882144960d3680695f25

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fbohJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0f57c97e9ab1d28778f6487776042d9921bd51862d2c8a81c1388a254819eb6c

    • Size

      51KB

    • MD5

      2f23ca871a344f3eaa5c1e17564203e0

    • SHA1

      e3ea86b17190f4062d028a4229d67c69b72cc37b

    • SHA256

      0f57c97e9ab1d28778f6487776042d9921bd51862d2c8a81c1388a254819eb6c

    • SHA512

      b435cf1ba209fc4a42d1db7920fb1b758b3fe4a7e3b5261ddda99bd6fa35863d5dc652e0efbf3719a601720d7bc214fe2f112b039ebb882144960d3680695f25

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fbohJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks