Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cc19bab805262715fc8cc9ca51f7e6f0b03f9212ec52e4938adc1473fdfec0e1

  • Size

    899KB

  • Sample

    240725-ksvn2szajr

  • MD5

    4ad78bca378336ec3159b19537f842e7

  • SHA1

    dd4450b573b299ebf5f8a2e25fe97f0efd3fdfd9

  • SHA256

    cc19bab805262715fc8cc9ca51f7e6f0b03f9212ec52e4938adc1473fdfec0e1

  • SHA512

    ffc900909fee2d5b5ce7ada885fecf7c65b2f4abb92057ae6b0b8e5d61757913e079cab33fb70587c60d7c7d182cf52d5e1f835a53fc6961e83a9a497ef72a2e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXC:7wqd87VC

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      cc19bab805262715fc8cc9ca51f7e6f0b03f9212ec52e4938adc1473fdfec0e1

    • Size

      899KB

    • MD5

      4ad78bca378336ec3159b19537f842e7

    • SHA1

      dd4450b573b299ebf5f8a2e25fe97f0efd3fdfd9

    • SHA256

      cc19bab805262715fc8cc9ca51f7e6f0b03f9212ec52e4938adc1473fdfec0e1

    • SHA512

      ffc900909fee2d5b5ce7ada885fecf7c65b2f4abb92057ae6b0b8e5d61757913e079cab33fb70587c60d7c7d182cf52d5e1f835a53fc6961e83a9a497ef72a2e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXC:7wqd87VC

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks