Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    abd6d5d741741e0a33b9643285c72f22382450b747ab7d4e5e578b3e4982309d

  • Size

    899KB

  • Sample

    240908-zmw29avcnj

  • MD5

    0d613fb811889c71b32b4f8614e7d57f

  • SHA1

    f4fd001355a2259c295384b26d237daaddea25d2

  • SHA256

    abd6d5d741741e0a33b9643285c72f22382450b747ab7d4e5e578b3e4982309d

  • SHA512

    4b958dc1600aafa757d3558770cedb71bd8cc3e085554eeb0c21e5baa67d6c5866df4cb1e31b71c7ffb65e05f7d7f044f6c24748c946726783f1d65f34892d86

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      abd6d5d741741e0a33b9643285c72f22382450b747ab7d4e5e578b3e4982309d

    • Size

      899KB

    • MD5

      0d613fb811889c71b32b4f8614e7d57f

    • SHA1

      f4fd001355a2259c295384b26d237daaddea25d2

    • SHA256

      abd6d5d741741e0a33b9643285c72f22382450b747ab7d4e5e578b3e4982309d

    • SHA512

      4b958dc1600aafa757d3558770cedb71bd8cc3e085554eeb0c21e5baa67d6c5866df4cb1e31b71c7ffb65e05f7d7f044f6c24748c946726783f1d65f34892d86

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks