Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

5ab7498182...50.dll

windows7-x64

10

5ab7498182...50.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ab74981820f1513128d37a16563b5a61439b87c7e6fd8995d1a0d7497be5550

  • Size

    50KB

  • Sample

    240706-adedeascne

  • MD5

    8e5ee7d741642529a5c58efcedd4f764

  • SHA1

    1354ef0db8f4e072d0a82b1a1cb0f3280c7ff8d8

  • SHA256

    5ab74981820f1513128d37a16563b5a61439b87c7e6fd8995d1a0d7497be5550

  • SHA512

    c633cc27607e0f7f9b289c465fcd146eeacfac3340391d24bd62836329b19406ab62972a3f7d6ab31ba65425e1750f775188286e8b627ed2abe7b18bb2178f33

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5cJYH:W5ReWjTrW9rNPgYo+JYH

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5ab74981820f1513128d37a16563b5a61439b87c7e6fd8995d1a0d7497be5550

    • Size

      50KB

    • MD5

      8e5ee7d741642529a5c58efcedd4f764

    • SHA1

      1354ef0db8f4e072d0a82b1a1cb0f3280c7ff8d8

    • SHA256

      5ab74981820f1513128d37a16563b5a61439b87c7e6fd8995d1a0d7497be5550

    • SHA512

      c633cc27607e0f7f9b289c465fcd146eeacfac3340391d24bd62836329b19406ab62972a3f7d6ab31ba65425e1750f775188286e8b627ed2abe7b18bb2178f33

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5cJYH:W5ReWjTrW9rNPgYo+JYH

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks