Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5175ea2ad2041bcd243565dcab10ba736dcd5261386452b8f3b70f09967ed297

  • Size

    899KB

  • Sample

    240801-2zkk4a1drp

  • MD5

    2b1d9d964771c2588eb17dd9e824d39a

  • SHA1

    ce372a6b426d03fdd9b327a588195a31118d65b6

  • SHA256

    5175ea2ad2041bcd243565dcab10ba736dcd5261386452b8f3b70f09967ed297

  • SHA512

    02839a47b71d855c1c8bf244b6b505671a7860a9f8ea933be98f2cb4afaf00a9acda76a102cfdebd8def427f8b96060af11ce555bdf99de15ddf58b6ce28f522

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5175ea2ad2041bcd243565dcab10ba736dcd5261386452b8f3b70f09967ed297

    • Size

      899KB

    • MD5

      2b1d9d964771c2588eb17dd9e824d39a

    • SHA1

      ce372a6b426d03fdd9b327a588195a31118d65b6

    • SHA256

      5175ea2ad2041bcd243565dcab10ba736dcd5261386452b8f3b70f09967ed297

    • SHA512

      02839a47b71d855c1c8bf244b6b505671a7860a9f8ea933be98f2cb4afaf00a9acda76a102cfdebd8def427f8b96060af11ce555bdf99de15ddf58b6ce28f522

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks