Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b2fb9196ad7be020ce2e6eb226b3fda653adb585205ac5891d083613a2b406f1

  • Size

    51KB

  • Sample

    241014-2agsxatbkq

  • MD5

    84f9ce07302135e8f841dcec0fc627e8

  • SHA1

    cb89a9fa718f8a823f7cdf9135e0c133d202123f

  • SHA256

    b2fb9196ad7be020ce2e6eb226b3fda653adb585205ac5891d083613a2b406f1

  • SHA512

    bcc42ac803124bfa9ebf7d2ed391377632d496a005ad28df566f8294486cda514174b3b816388b6c47fbe5fa691baee169fcdef1800fb935419a43bd50ea0889

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLHJYH5:1dWubF3n9S91BF3fbo7JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b2fb9196ad7be020ce2e6eb226b3fda653adb585205ac5891d083613a2b406f1

    • Size

      51KB

    • MD5

      84f9ce07302135e8f841dcec0fc627e8

    • SHA1

      cb89a9fa718f8a823f7cdf9135e0c133d202123f

    • SHA256

      b2fb9196ad7be020ce2e6eb226b3fda653adb585205ac5891d083613a2b406f1

    • SHA512

      bcc42ac803124bfa9ebf7d2ed391377632d496a005ad28df566f8294486cda514174b3b816388b6c47fbe5fa691baee169fcdef1800fb935419a43bd50ea0889

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLHJYH5:1dWubF3n9S91BF3fbo7JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks