Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dab34dd2f3af257599cf9c8dd0be90852da68369f47581f0ecb58180919fc0c6

  • Size

    51KB

  • Sample

    240531-jbjpsabh97

  • MD5

    f9707f416251b14570348746fad562ab

  • SHA1

    d83db906882cb50c3c608e825b458add42a8e4ae

  • SHA256

    dab34dd2f3af257599cf9c8dd0be90852da68369f47581f0ecb58180919fc0c6

  • SHA512

    0776751619a4a4720764a15df72fd63b39ab2098d54d80759f8f174f3fe0aff0197b23385b7ba494cd1908ff9fae4b05f9145700dcdf7478baebc879de085383

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbooJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      dab34dd2f3af257599cf9c8dd0be90852da68369f47581f0ecb58180919fc0c6

    • Size

      51KB

    • MD5

      f9707f416251b14570348746fad562ab

    • SHA1

      d83db906882cb50c3c608e825b458add42a8e4ae

    • SHA256

      dab34dd2f3af257599cf9c8dd0be90852da68369f47581f0ecb58180919fc0c6

    • SHA512

      0776751619a4a4720764a15df72fd63b39ab2098d54d80759f8f174f3fe0aff0197b23385b7ba494cd1908ff9fae4b05f9145700dcdf7478baebc879de085383

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbooJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks