Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fd4aacebfa6882b30fbb55fd867d5d1000a302532e31f9a7fa9a9690c7175d91

  • Size

    51KB

  • Sample

    240624-xgmkhsxdre

  • MD5

    566953a67b7b985e7185bc294b934a4b

  • SHA1

    2aedb3a9efcd59f650b0adf74d2d4843452a6bd3

  • SHA256

    fd4aacebfa6882b30fbb55fd867d5d1000a302532e31f9a7fa9a9690c7175d91

  • SHA512

    a6316023d395bf23772e7c1d8a7a7536df108bebe12fa8aea777c8399c91a24205dd993ddb1da2802fd82d62f92e3993462e9a3a9e305933f4a2e1a8a9e465c2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboGJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      fd4aacebfa6882b30fbb55fd867d5d1000a302532e31f9a7fa9a9690c7175d91

    • Size

      51KB

    • MD5

      566953a67b7b985e7185bc294b934a4b

    • SHA1

      2aedb3a9efcd59f650b0adf74d2d4843452a6bd3

    • SHA256

      fd4aacebfa6882b30fbb55fd867d5d1000a302532e31f9a7fa9a9690c7175d91

    • SHA512

      a6316023d395bf23772e7c1d8a7a7536df108bebe12fa8aea777c8399c91a24205dd993ddb1da2802fd82d62f92e3993462e9a3a9e305933f4a2e1a8a9e465c2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboGJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks