Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b19498c554...a0.dll

windows7-x64

10

b19498c554...a0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b19498c55408186137aaaf887dd7f2201e89fb7780f0b06ee2e95776a64329a0

  • Size

    51KB

  • Sample

    240701-bz9l4sscnh

  • MD5

    1c14a060a4a815b4ffc26212743ace71

  • SHA1

    b14930701d9d4dc987004432ad8c75c0074ba184

  • SHA256

    b19498c55408186137aaaf887dd7f2201e89fb7780f0b06ee2e95776a64329a0

  • SHA512

    d0d29e99c942c488211c90a7deb1e25e88f49c280195fa9e7598ba1d420f53e560b83acb9e03c66ed8a6a3acf8e68e2f1ff100cc7436cb9a1f2692677de61550

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboCJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b19498c55408186137aaaf887dd7f2201e89fb7780f0b06ee2e95776a64329a0

    • Size

      51KB

    • MD5

      1c14a060a4a815b4ffc26212743ace71

    • SHA1

      b14930701d9d4dc987004432ad8c75c0074ba184

    • SHA256

      b19498c55408186137aaaf887dd7f2201e89fb7780f0b06ee2e95776a64329a0

    • SHA512

      d0d29e99c942c488211c90a7deb1e25e88f49c280195fa9e7598ba1d420f53e560b83acb9e03c66ed8a6a3acf8e68e2f1ff100cc7436cb9a1f2692677de61550

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboCJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks