Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    61e903f796a393072dc2d719a69268e554022aa34294177ac034669ee2c458d7

  • Size

    50KB

  • Sample

    240624-xk88paxgjb

  • MD5

    2ed18d3730dc28ce2d0f4163c401ef5f

  • SHA1

    7dc3138dc66e25df86448cd4d9fa2a6346fdaa32

  • SHA256

    61e903f796a393072dc2d719a69268e554022aa34294177ac034669ee2c458d7

  • SHA512

    64eeee6fdd11e1e4c5158f787747004e99a56202ab5bc61ce088ed748faebd6aa3b9caed67a33571fd670f2b6ff779d45f9d344eb76797ff76fd01066e9808dc

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5tJYH:W5ReWjTrW9rNPgYoTJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      61e903f796a393072dc2d719a69268e554022aa34294177ac034669ee2c458d7

    • Size

      50KB

    • MD5

      2ed18d3730dc28ce2d0f4163c401ef5f

    • SHA1

      7dc3138dc66e25df86448cd4d9fa2a6346fdaa32

    • SHA256

      61e903f796a393072dc2d719a69268e554022aa34294177ac034669ee2c458d7

    • SHA512

      64eeee6fdd11e1e4c5158f787747004e99a56202ab5bc61ce088ed748faebd6aa3b9caed67a33571fd670f2b6ff779d45f9d344eb76797ff76fd01066e9808dc

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5tJYH:W5ReWjTrW9rNPgYoTJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks