Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    94bf479bcf583ffd8dabab44f6210fd289f9b5d4f755d753e6a1c4c46901b193

  • Size

    51KB

  • Sample

    240624-xjempaxfjf

  • MD5

    da8b02a579f20902e1f32a95876b4918

  • SHA1

    c893958e2d85db685d7ffb3a67311e957321d333

  • SHA256

    94bf479bcf583ffd8dabab44f6210fd289f9b5d4f755d753e6a1c4c46901b193

  • SHA512

    20286d75fa066acda45d5e2cb8c21c4b79ed3489ee9645412d6c709e1f7881f9377d65ba5282f20cd45bde1222731207797950b480270d6b5b8ba1d92b250958

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fbo6JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      94bf479bcf583ffd8dabab44f6210fd289f9b5d4f755d753e6a1c4c46901b193

    • Size

      51KB

    • MD5

      da8b02a579f20902e1f32a95876b4918

    • SHA1

      c893958e2d85db685d7ffb3a67311e957321d333

    • SHA256

      94bf479bcf583ffd8dabab44f6210fd289f9b5d4f755d753e6a1c4c46901b193

    • SHA512

      20286d75fa066acda45d5e2cb8c21c4b79ed3489ee9645412d6c709e1f7881f9377d65ba5282f20cd45bde1222731207797950b480270d6b5b8ba1d92b250958

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fbo6JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks