Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d0b046fe40470f797546f3c66ba6d6690d021afd15bfe300f113cfe192d621fa

  • Size

    51KB

  • Sample

    240624-xgmwaaxeja

  • MD5

    7238de371a5fcb9ff106bcc28485f526

  • SHA1

    f76e46da5c8c2d52bbf62a340e3ffed79a5bd300

  • SHA256

    d0b046fe40470f797546f3c66ba6d6690d021afd15bfe300f113cfe192d621fa

  • SHA512

    66aa1dade49ae63aa5ca27087ff41028c9ce1cd3d7888e170834efd5116738b761fed94da05816a848866db6eb1ffff473c0c8bf0bdd58f103d2c6618e4e60d4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboaJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      d0b046fe40470f797546f3c66ba6d6690d021afd15bfe300f113cfe192d621fa

    • Size

      51KB

    • MD5

      7238de371a5fcb9ff106bcc28485f526

    • SHA1

      f76e46da5c8c2d52bbf62a340e3ffed79a5bd300

    • SHA256

      d0b046fe40470f797546f3c66ba6d6690d021afd15bfe300f113cfe192d621fa

    • SHA512

      66aa1dade49ae63aa5ca27087ff41028c9ce1cd3d7888e170834efd5116738b761fed94da05816a848866db6eb1ffff473c0c8bf0bdd58f103d2c6618e4e60d4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboaJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks