Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3659c1ce10e0e7310d2bca3c3e37003b6e954087865c3fe27d00cd512ecc5510

  • Size

    49KB

  • Sample

    250311-yg19catwey

  • MD5

    660c6574cf190abf94878ad8f2eff8a0

  • SHA1

    2b45649022661a4f85f5bbe40781b23166fa7976

  • SHA256

    3659c1ce10e0e7310d2bca3c3e37003b6e954087865c3fe27d00cd512ecc5510

  • SHA512

    0fe97959df3025738f800731536e709628504496bdc0458c148847ef8c4dacd8df8272e562f258d08dc66a2c5efd04bf9da95fa1477e5efff0dd3adac8192699

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOTJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJMJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      3659c1ce10e0e7310d2bca3c3e37003b6e954087865c3fe27d00cd512ecc5510

    • Size

      49KB

    • MD5

      660c6574cf190abf94878ad8f2eff8a0

    • SHA1

      2b45649022661a4f85f5bbe40781b23166fa7976

    • SHA256

      3659c1ce10e0e7310d2bca3c3e37003b6e954087865c3fe27d00cd512ecc5510

    • SHA512

      0fe97959df3025738f800731536e709628504496bdc0458c148847ef8c4dacd8df8272e562f258d08dc66a2c5efd04bf9da95fa1477e5efff0dd3adac8192699

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOTJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJMJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks