Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4b148f0a6732466c0e7cf597f0051807f1bea07b20190f3f7714ff942c06b141

  • Size

    51KB

  • Sample

    240624-2rygzszalj

  • MD5

    c323b0487d3e894b99ad4b898142e619

  • SHA1

    d8ee38c160fdea29c014f7113ce267f79a2a2cda

  • SHA256

    4b148f0a6732466c0e7cf597f0051807f1bea07b20190f3f7714ff942c06b141

  • SHA512

    3efc97fd13326bce3b0109d47955010f6b132b40b0ca882b73ba6c53bbda88005521bc17f6cd46b6d38c6ec95c1607ee19f01b0249a8692bc9f8f21a5fa075a7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fboMJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4b148f0a6732466c0e7cf597f0051807f1bea07b20190f3f7714ff942c06b141

    • Size

      51KB

    • MD5

      c323b0487d3e894b99ad4b898142e619

    • SHA1

      d8ee38c160fdea29c014f7113ce267f79a2a2cda

    • SHA256

      4b148f0a6732466c0e7cf597f0051807f1bea07b20190f3f7714ff942c06b141

    • SHA512

      3efc97fd13326bce3b0109d47955010f6b132b40b0ca882b73ba6c53bbda88005521bc17f6cd46b6d38c6ec95c1607ee19f01b0249a8692bc9f8f21a5fa075a7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fboMJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks