Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0af4aedfb0052a9f06d7b5bb841e615e51759fc86a5f84601afcea28cccc0f52

  • Size

    899KB

  • Sample

    240909-nngheaxgqc

  • MD5

    9629d4e149faa9933af7c3958bdd9f32

  • SHA1

    90ef3c4bbdf54db43f2eb7168ff251fc6641eb50

  • SHA256

    0af4aedfb0052a9f06d7b5bb841e615e51759fc86a5f84601afcea28cccc0f52

  • SHA512

    96040173ae29e51a725024a0445ac4155b400b09b51b56ed55b24acbfc18a2b15568314ff0d10cb42d77238f44ed821bb563956a26df88172c18939cebb80c85

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX1:7wqd87V1

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      0af4aedfb0052a9f06d7b5bb841e615e51759fc86a5f84601afcea28cccc0f52

    • Size

      899KB

    • MD5

      9629d4e149faa9933af7c3958bdd9f32

    • SHA1

      90ef3c4bbdf54db43f2eb7168ff251fc6641eb50

    • SHA256

      0af4aedfb0052a9f06d7b5bb841e615e51759fc86a5f84601afcea28cccc0f52

    • SHA512

      96040173ae29e51a725024a0445ac4155b400b09b51b56ed55b24acbfc18a2b15568314ff0d10cb42d77238f44ed821bb563956a26df88172c18939cebb80c85

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX1:7wqd87V1

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks