Overview

overview

10

Static

static

9

3b5ce6a6df...ee.dll

windows7_x64

10

3b5ce6a6df...ee.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3b5ce6a6dfa672d7d1f4c4b9fe0f6571cecea58401bee.dll
  • Size 225KB
  • Sample210806-cm18zrnxbe
  • SHA256 3b5ce6a6dfa672d7d1f4c4b9fe0f6571cecea58401beeb704513a0d97763cb54
  • MD5 SHA1 SHA512
Score
10/10
suricataupx

Malware Config

Targets

    • Target
      3b5ce6a6dfa672d7d1f4c4b9fe0f6571cecea58401bee.dll
    • Size 225KB
    • SHA256 3b5ce6a6dfa672d7d1f4c4b9fe0f6571cecea58401beeb704513a0d97763cb54
    • MD5 SHA1 SHA512
    Score
    10/10
    suricata

    • suricata: ET MALWARE Backdoor family PCRat/Gh0st CnC traffic (OUTBOUND) 39

      suricata: ET MALWARE Backdoor family PCRat/Gh0st CnC traffic (OUTBOUND) 39

      suricata

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks