Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e51c4fa6ee...2b.dll

windows7-x64

10

e51c4fa6ee...2b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e51c4fa6ee60b9f183ff3e91bfc4a87194db92d7fbc2feb1cfe61434ae94c12b

  • Size

    899KB

  • Sample

    240719-3t31xswfnq

  • MD5

    a10a402f5fb7f9a528182e9706529423

  • SHA1

    5954e82e00de718b949d94d32a0aa09beef011e5

  • SHA256

    e51c4fa6ee60b9f183ff3e91bfc4a87194db92d7fbc2feb1cfe61434ae94c12b

  • SHA512

    2ec89169caa37568b273f2a4cf1992d4cee6a426d8d9f8ce868457eab2588485c736e497ed95d154c1bfffafc29b2198058a903957184e0b90a8274cb46b6c49

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXs:7wqd87Vs

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      e51c4fa6ee60b9f183ff3e91bfc4a87194db92d7fbc2feb1cfe61434ae94c12b

    • Size

      899KB

    • MD5

      a10a402f5fb7f9a528182e9706529423

    • SHA1

      5954e82e00de718b949d94d32a0aa09beef011e5

    • SHA256

      e51c4fa6ee60b9f183ff3e91bfc4a87194db92d7fbc2feb1cfe61434ae94c12b

    • SHA512

      2ec89169caa37568b273f2a4cf1992d4cee6a426d8d9f8ce868457eab2588485c736e497ed95d154c1bfffafc29b2198058a903957184e0b90a8274cb46b6c49

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXs:7wqd87Vs

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks