Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    092bcd1263c818d3da456462ce717d4ca66b8dd2f19d3712eafa21fb4c3fd8df

  • Size

    50KB

  • Sample

    240624-xgn4caxeje

  • MD5

    73c0b87fb7119e587d73d6b9f731db98

  • SHA1

    4a5e88a82ca4982c86fb5fdd6d91a62ab2f9641e

  • SHA256

    092bcd1263c818d3da456462ce717d4ca66b8dd2f19d3712eafa21fb4c3fd8df

  • SHA512

    b7bef00c1fd81d4cc104282a8ac2018fb30b5413a4c2b3ea220ec52200b2dc57061eeae251563e62d620fbd4dd8b4b6e0a9e11e51c06135a15eda7a50e29315b

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5fJYH:W5ReWjTrW9rNPgYoNJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      092bcd1263c818d3da456462ce717d4ca66b8dd2f19d3712eafa21fb4c3fd8df

    • Size

      50KB

    • MD5

      73c0b87fb7119e587d73d6b9f731db98

    • SHA1

      4a5e88a82ca4982c86fb5fdd6d91a62ab2f9641e

    • SHA256

      092bcd1263c818d3da456462ce717d4ca66b8dd2f19d3712eafa21fb4c3fd8df

    • SHA512

      b7bef00c1fd81d4cc104282a8ac2018fb30b5413a4c2b3ea220ec52200b2dc57061eeae251563e62d620fbd4dd8b4b6e0a9e11e51c06135a15eda7a50e29315b

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5fJYH:W5ReWjTrW9rNPgYoNJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks