Overview

overview

10

Static

static

10

844d5e2396...4b.dll

windows7-x64

10

844d5e2396...4b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    844d5e23965f603d2225299f9a1a4fca64f6806b17e43eab9a87efc496d8294b

  • Size

    135KB

  • Sample

    221021-e86hlaccg7

  • MD5

    78a2729a1a5e96ce499678aa9f7bbfbc

  • SHA1

    480d6e0a09b6b7d37651dfe59d94a25af44bf709

  • SHA256

    844d5e23965f603d2225299f9a1a4fca64f6806b17e43eab9a87efc496d8294b

  • SHA512

    259c4ea2d88d07bfe83015718b8f959c202ff4b625f98aabacea9c5b6d1d4f097a0e0f6f2bef65abce61b69409e9d82ac26331821b137d291667d5e291efc313

  • SSDEEP

    3072:0pF1ucA/Py2q2oGSe0cDnT0QDqsx0Y9BsqY/PNgu/zM:0pF1A/PyV2oGSe0A3q8v9BsqCNZI

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      844d5e23965f603d2225299f9a1a4fca64f6806b17e43eab9a87efc496d8294b

    • Size

      135KB

    • MD5

      78a2729a1a5e96ce499678aa9f7bbfbc

    • SHA1

      480d6e0a09b6b7d37651dfe59d94a25af44bf709

    • SHA256

      844d5e23965f603d2225299f9a1a4fca64f6806b17e43eab9a87efc496d8294b

    • SHA512

      259c4ea2d88d07bfe83015718b8f959c202ff4b625f98aabacea9c5b6d1d4f097a0e0f6f2bef65abce61b69409e9d82ac26331821b137d291667d5e291efc313

    • SSDEEP

      3072:0pF1ucA/Py2q2oGSe0cDnT0QDqsx0Y9BsqY/PNgu/zM:0pF1A/PyV2oGSe0A3q8v9BsqCNZI

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks