Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0d2a93df0c3c7f26992df74230ddb6d94aff8e6d49390ae460152d54e12974b9

  • Size

    51KB

  • Sample

    240919-vwsnzazgrg

  • MD5

    ef4e340faa09310fa5120a7969173f3f

  • SHA1

    646316509d4f42a1bf53e7147da302ee7b6cf565

  • SHA256

    0d2a93df0c3c7f26992df74230ddb6d94aff8e6d49390ae460152d54e12974b9

  • SHA512

    4e8fd9d0269918b0838573b23f5fefbcd10cb8051b8001e8e1a2a33269956dad24303d8c0bb5928b97fa1f4d1312878ab017e7127b92f17c039cb0a237b9e1d8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLSJYH5:1dWubF3n9S91BF3fbomJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0d2a93df0c3c7f26992df74230ddb6d94aff8e6d49390ae460152d54e12974b9

    • Size

      51KB

    • MD5

      ef4e340faa09310fa5120a7969173f3f

    • SHA1

      646316509d4f42a1bf53e7147da302ee7b6cf565

    • SHA256

      0d2a93df0c3c7f26992df74230ddb6d94aff8e6d49390ae460152d54e12974b9

    • SHA512

      4e8fd9d0269918b0838573b23f5fefbcd10cb8051b8001e8e1a2a33269956dad24303d8c0bb5928b97fa1f4d1312878ab017e7127b92f17c039cb0a237b9e1d8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLSJYH5:1dWubF3n9S91BF3fbomJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks