Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6f0c76c9fb488327956aeb5f62a6f5a8ba406d8bce124da26c0160f1e3a6abff

  • Size

    51KB

  • Sample

    240624-2tqvxszblq

  • MD5

    84116306bd57fbbc84a5bc6bc440f585

  • SHA1

    cd9bbc8c535cf335d8b2f0e0020fa6962228f6f5

  • SHA256

    6f0c76c9fb488327956aeb5f62a6f5a8ba406d8bce124da26c0160f1e3a6abff

  • SHA512

    90e7e8fc4222e89c14db87e04d562544ae727c49d7b3d4f816552b3f86acac8fdb923f1d06a8696606228c8ed4b8f8d49537d2eb195c6750fab97d434adfeec7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLPJYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6f0c76c9fb488327956aeb5f62a6f5a8ba406d8bce124da26c0160f1e3a6abff

    • Size

      51KB

    • MD5

      84116306bd57fbbc84a5bc6bc440f585

    • SHA1

      cd9bbc8c535cf335d8b2f0e0020fa6962228f6f5

    • SHA256

      6f0c76c9fb488327956aeb5f62a6f5a8ba406d8bce124da26c0160f1e3a6abff

    • SHA512

      90e7e8fc4222e89c14db87e04d562544ae727c49d7b3d4f816552b3f86acac8fdb923f1d06a8696606228c8ed4b8f8d49537d2eb195c6750fab97d434adfeec7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLPJYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks