Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3a84cdb817cb97904769624af4e449403bdba2b425932fd832264f03cbe5ad89

  • Size

    51KB

  • Sample

    240610-c6vxzaba21

  • MD5

    4830a532add3c60108e9550b9db46785

  • SHA1

    2a2a4cce2e15806c75cffe7172ba950b13b00e42

  • SHA256

    3a84cdb817cb97904769624af4e449403bdba2b425932fd832264f03cbe5ad89

  • SHA512

    a9c97f65a15fd013375563af0994944a2790d4e2fadab38e9e62599b9c0887dd20b029c46261ce64afff29ba657afeb03d29fc364f4d1bf46c12eeed4e9f3c8a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fbo0JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3a84cdb817cb97904769624af4e449403bdba2b425932fd832264f03cbe5ad89

    • Size

      51KB

    • MD5

      4830a532add3c60108e9550b9db46785

    • SHA1

      2a2a4cce2e15806c75cffe7172ba950b13b00e42

    • SHA256

      3a84cdb817cb97904769624af4e449403bdba2b425932fd832264f03cbe5ad89

    • SHA512

      a9c97f65a15fd013375563af0994944a2790d4e2fadab38e9e62599b9c0887dd20b029c46261ce64afff29ba657afeb03d29fc364f4d1bf46c12eeed4e9f3c8a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fbo0JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks