Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9683f68029...cs.dll

windows7-x64

10

9683f68029...cs.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9683f68029eddea9c988e91fed8f6f00_NeikiAnalytics.exe

  • Size

    899KB

  • Sample

    240614-bp71jatbmr

  • MD5

    9683f68029eddea9c988e91fed8f6f00

  • SHA1

    136dfa726ded1cf6d51794c85cb9def0d7dd5aea

  • SHA256

    f654555751eafe297ce76580a1a1f5976b8abb982602eb8e2f06aa34e5295d78

  • SHA512

    f7872357d894a724e8844c5279ceabe325cf9892ad788bc1560709ec9932f897fd5b5d06b0d874ebdee21db5ab3fc9f501efdb425fe3f7922bc44a1f955632f0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      9683f68029eddea9c988e91fed8f6f00_NeikiAnalytics.exe

    • Size

      899KB

    • MD5

      9683f68029eddea9c988e91fed8f6f00

    • SHA1

      136dfa726ded1cf6d51794c85cb9def0d7dd5aea

    • SHA256

      f654555751eafe297ce76580a1a1f5976b8abb982602eb8e2f06aa34e5295d78

    • SHA512

      f7872357d894a724e8844c5279ceabe325cf9892ad788bc1560709ec9932f897fd5b5d06b0d874ebdee21db5ab3fc9f501efdb425fe3f7922bc44a1f955632f0

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks