Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7432f5c563d7393904c8880dc0ad2123ae80267d9681a86ee3b4182c2d3b0d36

  • Size

    899KB

  • Sample

    240624-2rnb1swdqd

  • MD5

    a965f3826583be64e02adc1a4e13241d

  • SHA1

    0eb3558554d3ef837e5fc8cdb786e912a0e7d599

  • SHA256

    7432f5c563d7393904c8880dc0ad2123ae80267d9681a86ee3b4182c2d3b0d36

  • SHA512

    7fd0b4fc2c322d8085cdfd7f4c2bbd4f7b07a75607c0a8c4a638afb7527cb40ca08f9dc33f4603874a6384f15eee66e3ac05ccbbfb742e3602417a9bf27ed12a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7432f5c563d7393904c8880dc0ad2123ae80267d9681a86ee3b4182c2d3b0d36

    • Size

      899KB

    • MD5

      a965f3826583be64e02adc1a4e13241d

    • SHA1

      0eb3558554d3ef837e5fc8cdb786e912a0e7d599

    • SHA256

      7432f5c563d7393904c8880dc0ad2123ae80267d9681a86ee3b4182c2d3b0d36

    • SHA512

      7fd0b4fc2c322d8085cdfd7f4c2bbd4f7b07a75607c0a8c4a638afb7527cb40ca08f9dc33f4603874a6384f15eee66e3ac05ccbbfb742e3602417a9bf27ed12a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks