Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e9bc53110343e7beab8ca7c1c5e308289d4da5d5ff8614082b34de7f709e08d1

  • Size

    51KB

  • Sample

    240909-nnswfavhlk

  • MD5

    5d3b688aea570a33a978113194dd3421

  • SHA1

    7e9f5929f822645d3be71a47eb4b39fa9ce53926

  • SHA256

    e9bc53110343e7beab8ca7c1c5e308289d4da5d5ff8614082b34de7f709e08d1

  • SHA512

    14657f949a7c15de6276766de1178ecb49fc3dca21cb0fc8be9342343fc7ba73a32fc9e8db3715e7c33d0f573396cd790199db73393c4ed2b13a59cc3cd84e66

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fbowJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e9bc53110343e7beab8ca7c1c5e308289d4da5d5ff8614082b34de7f709e08d1

    • Size

      51KB

    • MD5

      5d3b688aea570a33a978113194dd3421

    • SHA1

      7e9f5929f822645d3be71a47eb4b39fa9ce53926

    • SHA256

      e9bc53110343e7beab8ca7c1c5e308289d4da5d5ff8614082b34de7f709e08d1

    • SHA512

      14657f949a7c15de6276766de1178ecb49fc3dca21cb0fc8be9342343fc7ba73a32fc9e8db3715e7c33d0f573396cd790199db73393c4ed2b13a59cc3cd84e66

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fbowJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks