Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    99995f02ee2076cb8e598847976a768dc34b19b870e258c9338ff0be77cd55c1

  • Size

    51KB

  • Sample

    240925-rb4zqaygnn

  • MD5

    48e4bbee7fd6b95d95e4f44bcd7939a2

  • SHA1

    db74e387dd961c9b4d8ccaf03fa3b28e9e3c6d26

  • SHA256

    99995f02ee2076cb8e598847976a768dc34b19b870e258c9338ff0be77cd55c1

  • SHA512

    7aade5e49c3158df3e0ca7942936514d4125bf2a256884bf46ef77cfbf46069f82ee414ce1a808866f184f937176b5fe4256bb540a20d5287505a0964d18cff6

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL5JYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      99995f02ee2076cb8e598847976a768dc34b19b870e258c9338ff0be77cd55c1

    • Size

      51KB

    • MD5

      48e4bbee7fd6b95d95e4f44bcd7939a2

    • SHA1

      db74e387dd961c9b4d8ccaf03fa3b28e9e3c6d26

    • SHA256

      99995f02ee2076cb8e598847976a768dc34b19b870e258c9338ff0be77cd55c1

    • SHA512

      7aade5e49c3158df3e0ca7942936514d4125bf2a256884bf46ef77cfbf46069f82ee414ce1a808866f184f937176b5fe4256bb540a20d5287505a0964d18cff6

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL5JYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks