Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fa8ee3dd00eb097a91a80acf0c5a7bd6cd0fca6a2b115121921da14ced693490

  • Size

    899KB

  • Sample

    240624-xgmkhszhnn

  • MD5

    6b9bfa0bfc7630e6a584733da88b7b4c

  • SHA1

    e59d3ffb81b48155e145365a62c20ecdf0e31d10

  • SHA256

    fa8ee3dd00eb097a91a80acf0c5a7bd6cd0fca6a2b115121921da14ced693490

  • SHA512

    1f2969ebf59cf686b8112b20d436b4a56c2c89132011ea39237ceecbd7a39bdf1a98725c2561f119c095161de4af611690a268a8c84fc3c5f5ba7f7a4aeb98cc

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fa8ee3dd00eb097a91a80acf0c5a7bd6cd0fca6a2b115121921da14ced693490

    • Size

      899KB

    • MD5

      6b9bfa0bfc7630e6a584733da88b7b4c

    • SHA1

      e59d3ffb81b48155e145365a62c20ecdf0e31d10

    • SHA256

      fa8ee3dd00eb097a91a80acf0c5a7bd6cd0fca6a2b115121921da14ced693490

    • SHA512

      1f2969ebf59cf686b8112b20d436b4a56c2c89132011ea39237ceecbd7a39bdf1a98725c2561f119c095161de4af611690a268a8c84fc3c5f5ba7f7a4aeb98cc

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks