Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ce39d9bf68...2f.dll

windows7-x64

10

ce39d9bf68...2f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce39d9bf680bd3adf6b9771bfdf10db7a17a9a18e57fd47b136fdab1fcc43c2f

  • Size

    899KB

  • Sample

    240611-2h7djavbpk

  • MD5

    32305e747d5cbf7f265923c4c2807825

  • SHA1

    b421b2a55844f0461f2972012febb02272553e48

  • SHA256

    ce39d9bf680bd3adf6b9771bfdf10db7a17a9a18e57fd47b136fdab1fcc43c2f

  • SHA512

    0493bf585a78cb4aba6e48b035435a95be65563042bcede6ed7a8f5001b5041b7d3005be1af1cfab80941953ea50f8e4d6d288210388acfacec3a12f868ad5c1

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ce39d9bf680bd3adf6b9771bfdf10db7a17a9a18e57fd47b136fdab1fcc43c2f

    • Size

      899KB

    • MD5

      32305e747d5cbf7f265923c4c2807825

    • SHA1

      b421b2a55844f0461f2972012febb02272553e48

    • SHA256

      ce39d9bf680bd3adf6b9771bfdf10db7a17a9a18e57fd47b136fdab1fcc43c2f

    • SHA512

      0493bf585a78cb4aba6e48b035435a95be65563042bcede6ed7a8f5001b5041b7d3005be1af1cfab80941953ea50f8e4d6d288210388acfacec3a12f868ad5c1

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks