Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    637e14d25c2bbce008189af90148889d3fd0859b7080183f7151aa377fe3647a

  • Size

    51KB

  • Sample

    240531-hczxqaba36

  • MD5

    15951afc0a2f5ec9d7310660515273d0

  • SHA1

    d6a01080099e22bb442a6384b88aea412d75d67d

  • SHA256

    637e14d25c2bbce008189af90148889d3fd0859b7080183f7151aa377fe3647a

  • SHA512

    e1eb6d0bfde76b61f251c5ce2b9707bf5c3d16be75d96911ae5ff213a82e617619aaeb605a17ce95de3777ccd33adec083bcea06033512942071887c85433040

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLaJYH5:1dWubF3n9S91BF3fbouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      637e14d25c2bbce008189af90148889d3fd0859b7080183f7151aa377fe3647a

    • Size

      51KB

    • MD5

      15951afc0a2f5ec9d7310660515273d0

    • SHA1

      d6a01080099e22bb442a6384b88aea412d75d67d

    • SHA256

      637e14d25c2bbce008189af90148889d3fd0859b7080183f7151aa377fe3647a

    • SHA512

      e1eb6d0bfde76b61f251c5ce2b9707bf5c3d16be75d96911ae5ff213a82e617619aaeb605a17ce95de3777ccd33adec083bcea06033512942071887c85433040

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLaJYH5:1dWubF3n9S91BF3fbouJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks