Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    86c521c58b0c65c5e167871a1b55143d0f4fe90ef5f0a61a0d35c2fc50c1f5e6

  • Size

    51KB

  • Sample

    240911-y5g6da1gke

  • MD5

    ea24490f2dca444262e623a9d933fbde

  • SHA1

    3d1ffc4516bbc6baf73b7b1cce6f083b446838aa

  • SHA256

    86c521c58b0c65c5e167871a1b55143d0f4fe90ef5f0a61a0d35c2fc50c1f5e6

  • SHA512

    0092af2b5d5c385796e3e10faed8e111681bcc420889836c1feb128e640d6a1b7a4558308783833e4f3c6bef1013d1c48cf1d4e08a9812d6c7481d9fdab47e3c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      86c521c58b0c65c5e167871a1b55143d0f4fe90ef5f0a61a0d35c2fc50c1f5e6

    • Size

      51KB

    • MD5

      ea24490f2dca444262e623a9d933fbde

    • SHA1

      3d1ffc4516bbc6baf73b7b1cce6f083b446838aa

    • SHA256

      86c521c58b0c65c5e167871a1b55143d0f4fe90ef5f0a61a0d35c2fc50c1f5e6

    • SHA512

      0092af2b5d5c385796e3e10faed8e111681bcc420889836c1feb128e640d6a1b7a4558308783833e4f3c6bef1013d1c48cf1d4e08a9812d6c7481d9fdab47e3c

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks