Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fc0ee1019d1d70fe50276370eb04239799952a96c7eabc72353ab98462bdaea4

  • Size

    50KB

  • Sample

    240912-qcz7gswdrr

  • MD5

    8a4ddc983d187eed6d044aba09d2e6e9

  • SHA1

    8172aa1c1922542adebdd2c21f544e6d363d5aa5

  • SHA256

    fc0ee1019d1d70fe50276370eb04239799952a96c7eabc72353ab98462bdaea4

  • SHA512

    9c064f74a144ced1328f40204bd1032c9df7178c8aa07c877676b5f7a958b07f63a2a7342a2121a438e8a758edc02003c316e2d54500a477e69b19318caac72f

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5lJYH:W5ReWjTrW9rNPgYorJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fc0ee1019d1d70fe50276370eb04239799952a96c7eabc72353ab98462bdaea4

    • Size

      50KB

    • MD5

      8a4ddc983d187eed6d044aba09d2e6e9

    • SHA1

      8172aa1c1922542adebdd2c21f544e6d363d5aa5

    • SHA256

      fc0ee1019d1d70fe50276370eb04239799952a96c7eabc72353ab98462bdaea4

    • SHA512

      9c064f74a144ced1328f40204bd1032c9df7178c8aa07c877676b5f7a958b07f63a2a7342a2121a438e8a758edc02003c316e2d54500a477e69b19318caac72f

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5lJYH:W5ReWjTrW9rNPgYorJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks