Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    21da6f5c35d7236c031178fc72705896269719be99d9459b0b56323deac3ed4d

  • Size

    51KB

  • Sample

    241004-j1kndaxclb

  • MD5

    8dd2e57aaac056a0a8bbcd7a3b3c156c

  • SHA1

    0f338375ee3eda11d0d839ad8833356908057400

  • SHA256

    21da6f5c35d7236c031178fc72705896269719be99d9459b0b56323deac3ed4d

  • SHA512

    92ab3caf35e43a8967cf4ec4502c7a6ceb4bf60c4ddc2449b88357b4b33362db98e4ab84053ba0af6384362d2798258e80d2b382f76456824bc22edbbd1bba9d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLKJYH5:1dWubF3n9S91BF3fboOJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      21da6f5c35d7236c031178fc72705896269719be99d9459b0b56323deac3ed4d

    • Size

      51KB

    • MD5

      8dd2e57aaac056a0a8bbcd7a3b3c156c

    • SHA1

      0f338375ee3eda11d0d839ad8833356908057400

    • SHA256

      21da6f5c35d7236c031178fc72705896269719be99d9459b0b56323deac3ed4d

    • SHA512

      92ab3caf35e43a8967cf4ec4502c7a6ceb4bf60c4ddc2449b88357b4b33362db98e4ab84053ba0af6384362d2798258e80d2b382f76456824bc22edbbd1bba9d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLKJYH5:1dWubF3n9S91BF3fboOJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks