Overview

overview

10

Static

static

10

d4349f84de...80.dll

windows7-x64

10

d4349f84de...80.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4349f84de614387eb4a935da36578e8926e755679b6377e8c547ad004bec380

  • Size

    899KB

  • Sample

    240701-ezptgswdnf

  • MD5

    414ceca131eed88f4fcb51582cbbaa57

  • SHA1

    799dfddbcba2a3e6421eec1176496285893afae4

  • SHA256

    d4349f84de614387eb4a935da36578e8926e755679b6377e8c547ad004bec380

  • SHA512

    934f537a7fa5109910a991476992736a07e7f7fc6f0e847cb98efc1b921a0d0f4c0b898ab3dcf67ccaefb04f0e197ee1eda37ec531a5997e0c5b23bee778e290

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d4349f84de614387eb4a935da36578e8926e755679b6377e8c547ad004bec380

    • Size

      899KB

    • MD5

      414ceca131eed88f4fcb51582cbbaa57

    • SHA1

      799dfddbcba2a3e6421eec1176496285893afae4

    • SHA256

      d4349f84de614387eb4a935da36578e8926e755679b6377e8c547ad004bec380

    • SHA512

      934f537a7fa5109910a991476992736a07e7f7fc6f0e847cb98efc1b921a0d0f4c0b898ab3dcf67ccaefb04f0e197ee1eda37ec531a5997e0c5b23bee778e290

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks