Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    175477fec28ce890e43d02e9a64b1302cd44bea5afa1145389578d280e65bc84

  • Size

    899KB

  • Sample

    240811-yqndvavgml

  • MD5

    c4fc2268047c59aec86b054d3236817e

  • SHA1

    3e2944e3ceb00086d012eb1f1e37ff78030db620

  • SHA256

    175477fec28ce890e43d02e9a64b1302cd44bea5afa1145389578d280e65bc84

  • SHA512

    d9a7e3f79e93d52c885000d1a46529047994e42cf974ac28d97b41f71865987888770127bd40b9079c0a883b0b19777673a2b83ba5ced65a81fe76149a1fee91

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      175477fec28ce890e43d02e9a64b1302cd44bea5afa1145389578d280e65bc84

    • Size

      899KB

    • MD5

      c4fc2268047c59aec86b054d3236817e

    • SHA1

      3e2944e3ceb00086d012eb1f1e37ff78030db620

    • SHA256

      175477fec28ce890e43d02e9a64b1302cd44bea5afa1145389578d280e65bc84

    • SHA512

      d9a7e3f79e93d52c885000d1a46529047994e42cf974ac28d97b41f71865987888770127bd40b9079c0a883b0b19777673a2b83ba5ced65a81fe76149a1fee91

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks