Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f34c4377b22e125e8f9c366075974278b0a5f338e5de5b3975a43ca41afa74a0

  • Size

    899KB

  • Sample

    240808-h364qa1dlr

  • MD5

    58c1c62af3e479734bd5d778c292e0f5

  • SHA1

    bde4b4a25e7c00060ca54fbb74c8e9d3c000df54

  • SHA256

    f34c4377b22e125e8f9c366075974278b0a5f338e5de5b3975a43ca41afa74a0

  • SHA512

    8642a2201f4c00a00d21fa3a4142461a07ca2ad0563b58e7eab757d2e908c0f0091cb1bd46c06473c51817b87f5affa1c26e9ea41cf630e2ff88ff0d49c5ce67

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f34c4377b22e125e8f9c366075974278b0a5f338e5de5b3975a43ca41afa74a0

    • Size

      899KB

    • MD5

      58c1c62af3e479734bd5d778c292e0f5

    • SHA1

      bde4b4a25e7c00060ca54fbb74c8e9d3c000df54

    • SHA256

      f34c4377b22e125e8f9c366075974278b0a5f338e5de5b3975a43ca41afa74a0

    • SHA512

      8642a2201f4c00a00d21fa3a4142461a07ca2ad0563b58e7eab757d2e908c0f0091cb1bd46c06473c51817b87f5affa1c26e9ea41cf630e2ff88ff0d49c5ce67

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks