Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    edb50040c726530b88a793ac3cf636353afb7adeca5fd5663213072425ce2812

  • Size

    51KB

  • Sample

    240624-2whx4awfqe

  • MD5

    8b3f3b3850b6c6ede6943d743068cfdd

  • SHA1

    8ca4d3657fd81269268fa7ca14964ccab202370f

  • SHA256

    edb50040c726530b88a793ac3cf636353afb7adeca5fd5663213072425ce2812

  • SHA512

    9fcffdd27266f67e523918b1af0abd38853a0679cb4cb30e6a0bc6f9f8f32cff8c51c15164e586dea37f99035bba33a8ae62930dd441f142200f9b28944ef712

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbogJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      edb50040c726530b88a793ac3cf636353afb7adeca5fd5663213072425ce2812

    • Size

      51KB

    • MD5

      8b3f3b3850b6c6ede6943d743068cfdd

    • SHA1

      8ca4d3657fd81269268fa7ca14964ccab202370f

    • SHA256

      edb50040c726530b88a793ac3cf636353afb7adeca5fd5663213072425ce2812

    • SHA512

      9fcffdd27266f67e523918b1af0abd38853a0679cb4cb30e6a0bc6f9f8f32cff8c51c15164e586dea37f99035bba33a8ae62930dd441f142200f9b28944ef712

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbogJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks