Overview

overview

10

Static

static

10

5b152ead90...f5.dll

windows7-x64

10

5b152ead90...f5.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b152ead90bb7b5ed40cb5521ef2bb3d8cd124bf4af5fee4c2390f1f5d34bff5

  • Size

    50KB

  • Sample

    240701-ezn7yswdnb

  • MD5

    ac3919c1a02d3810e5fcec1716541205

  • SHA1

    c277724b4ffc27c4d9da0795094e6a361808e48e

  • SHA256

    5b152ead90bb7b5ed40cb5521ef2bb3d8cd124bf4af5fee4c2390f1f5d34bff5

  • SHA512

    27562d45be8210ef7fb8402c7610263e4b9754872d3cb9b4d3a519789e3c45929216cb492959119092fcdd1cdfc14e44f6b41ceaa16cc6e70146c2357e6d5644

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5IJYH:W5ReWjTrW9rNPgYoKJYH

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5b152ead90bb7b5ed40cb5521ef2bb3d8cd124bf4af5fee4c2390f1f5d34bff5

    • Size

      50KB

    • MD5

      ac3919c1a02d3810e5fcec1716541205

    • SHA1

      c277724b4ffc27c4d9da0795094e6a361808e48e

    • SHA256

      5b152ead90bb7b5ed40cb5521ef2bb3d8cd124bf4af5fee4c2390f1f5d34bff5

    • SHA512

      27562d45be8210ef7fb8402c7610263e4b9754872d3cb9b4d3a519789e3c45929216cb492959119092fcdd1cdfc14e44f6b41ceaa16cc6e70146c2357e6d5644

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5IJYH:W5ReWjTrW9rNPgYoKJYH

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks