Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

53ad9ff67b...24.dll

windows7-x64

10

53ad9ff67b...24.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53ad9ff67b23c3cdc451a477b8ed77c19a7c2f69ea6290f2d8ab7190ce4e1024

  • Size

    51KB

  • Sample

    240704-28b1baxdja

  • MD5

    0ab0ad6c4a27e5ff7a60ff609df7d388

  • SHA1

    a28c1614373d67a2306cb60456bd1a7b359f3cda

  • SHA256

    53ad9ff67b23c3cdc451a477b8ed77c19a7c2f69ea6290f2d8ab7190ce4e1024

  • SHA512

    a0e97478c79f4ad0563fa56946695fd1073f6eeacc9258b0ce05f844536b5f8debd0b4d928c2acd746687179de7b0cba85ef41e8199a9481cb4a477f750cc228

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboiJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      53ad9ff67b23c3cdc451a477b8ed77c19a7c2f69ea6290f2d8ab7190ce4e1024

    • Size

      51KB

    • MD5

      0ab0ad6c4a27e5ff7a60ff609df7d388

    • SHA1

      a28c1614373d67a2306cb60456bd1a7b359f3cda

    • SHA256

      53ad9ff67b23c3cdc451a477b8ed77c19a7c2f69ea6290f2d8ab7190ce4e1024

    • SHA512

      a0e97478c79f4ad0563fa56946695fd1073f6eeacc9258b0ce05f844536b5f8debd0b4d928c2acd746687179de7b0cba85ef41e8199a9481cb4a477f750cc228

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboiJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks