Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    53a42378b2979eec3b2524fe1abf000174fa64a71ddf0db8ce879af8978876e9

  • Size

    49KB

  • Sample

    250228-dsx1vaywgt

  • MD5

    92f7688f6ddaef177d8d8e147a314461

  • SHA1

    8402871eeb61145d2d4a329b5f3e2cba621e479f

  • SHA256

    53a42378b2979eec3b2524fe1abf000174fa64a71ddf0db8ce879af8978876e9

  • SHA512

    add970ec2409a3d2c47f9b2191480665499d54b6e827c190a5da73b3fb8f845a426a6331699d6428e300ad1c3b8c3f578004fedbdbaf354a5da16a68db4f1147

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOcJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ3JYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      53a42378b2979eec3b2524fe1abf000174fa64a71ddf0db8ce879af8978876e9

    • Size

      49KB

    • MD5

      92f7688f6ddaef177d8d8e147a314461

    • SHA1

      8402871eeb61145d2d4a329b5f3e2cba621e479f

    • SHA256

      53a42378b2979eec3b2524fe1abf000174fa64a71ddf0db8ce879af8978876e9

    • SHA512

      add970ec2409a3d2c47f9b2191480665499d54b6e827c190a5da73b3fb8f845a426a6331699d6428e300ad1c3b8c3f578004fedbdbaf354a5da16a68db4f1147

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOcJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ3JYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks