Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9364004378fe99ea36109620464f30319d7e9367e536c852244daa44535d0024

  • Size

    899KB

  • Sample

    240612-3sh95azank

  • MD5

    830a3d5e9bf8ca03c37020fdb375da37

  • SHA1

    76e616d53e0c2a74e39d72650c97cb7ef669fe51

  • SHA256

    9364004378fe99ea36109620464f30319d7e9367e536c852244daa44535d0024

  • SHA512

    c8cce65e8817be2a0b0f3285dc9df641d0eedc7deef10e7be6b87e65f9b57aafb5a246a9a67805d78e4c0de9ac6413220b360d38ed2041d4d04a02dceeabb5b6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXs:7wqd87Vs

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      9364004378fe99ea36109620464f30319d7e9367e536c852244daa44535d0024

    • Size

      899KB

    • MD5

      830a3d5e9bf8ca03c37020fdb375da37

    • SHA1

      76e616d53e0c2a74e39d72650c97cb7ef669fe51

    • SHA256

      9364004378fe99ea36109620464f30319d7e9367e536c852244daa44535d0024

    • SHA512

      c8cce65e8817be2a0b0f3285dc9df641d0eedc7deef10e7be6b87e65f9b57aafb5a246a9a67805d78e4c0de9ac6413220b360d38ed2041d4d04a02dceeabb5b6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXs:7wqd87Vs

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks