Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    87f8ca46964070efaaf2552caaac5f4cd777c2cd415358424891744bd547f386

  • Size

    51KB

  • Sample

    240624-2ry4hszalm

  • MD5

    009ae9258313bc9a4c4ac67607c7fb82

  • SHA1

    e309bc26ef4d6c51a5d9b3c3bea5475cce7a7876

  • SHA256

    87f8ca46964070efaaf2552caaac5f4cd777c2cd415358424891744bd547f386

  • SHA512

    c266514bfb9605925cd152bdf8250d489fa46d09f0a3b44db351412ce8c2e842d1ff10d14b9af0c7151385936bbd84e8672e0bba4ae8632dc2be02aa5577da9e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbovJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      87f8ca46964070efaaf2552caaac5f4cd777c2cd415358424891744bd547f386

    • Size

      51KB

    • MD5

      009ae9258313bc9a4c4ac67607c7fb82

    • SHA1

      e309bc26ef4d6c51a5d9b3c3bea5475cce7a7876

    • SHA256

      87f8ca46964070efaaf2552caaac5f4cd777c2cd415358424891744bd547f386

    • SHA512

      c266514bfb9605925cd152bdf8250d489fa46d09f0a3b44db351412ce8c2e842d1ff10d14b9af0c7151385936bbd84e8672e0bba4ae8632dc2be02aa5577da9e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbovJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks