Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f63015f4fc0bc3a105b98c3187d3f15537a6312a7f7ce4af46458cf6323609ac

  • Size

    51KB

  • Sample

    240803-dec4hs1brj

  • MD5

    d095044818a6fe9bf043a1c01ef6c57f

  • SHA1

    667a0cef77cbb467d660ecc46329640fa2d1219c

  • SHA256

    f63015f4fc0bc3a105b98c3187d3f15537a6312a7f7ce4af46458cf6323609ac

  • SHA512

    7c60e806f4aef3e1b391df2db7d937935e0e1468531ffaae2e36070f96c2abf70df77ce058c571fa5dc527cf9202795f9cdef6a070176201535ec4d274a2d311

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbofJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f63015f4fc0bc3a105b98c3187d3f15537a6312a7f7ce4af46458cf6323609ac

    • Size

      51KB

    • MD5

      d095044818a6fe9bf043a1c01ef6c57f

    • SHA1

      667a0cef77cbb467d660ecc46329640fa2d1219c

    • SHA256

      f63015f4fc0bc3a105b98c3187d3f15537a6312a7f7ce4af46458cf6323609ac

    • SHA512

      7c60e806f4aef3e1b391df2db7d937935e0e1468531ffaae2e36070f96c2abf70df77ce058c571fa5dc527cf9202795f9cdef6a070176201535ec4d274a2d311

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbofJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks