Overview

overview

10

Static

static

cd9170ba15...f7.exe

windows7-x64

10

cd9170ba15...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd9170ba15cae3c599fd9de8067ec33bbbc5e1c1cac90a005f26ee60060e93f7

  • Size

    140KB

  • Sample

    221029-adkkesddcm

  • MD5

    06c18d1cf227f53d658514ef7616c210

  • SHA1

    c7e247adaf9ffd4f397b0ae0ccbd75bb500a55b1

  • SHA256

    cd9170ba15cae3c599fd9de8067ec33bbbc5e1c1cac90a005f26ee60060e93f7

  • SHA512

    4f462327c7a2ca7bc9c4d7c51cdbc8df98326dabaaf606c681fc8aea1f37572ac44045557a66e31d3fa6e194e91e689ed0cb2bc8136e68d26b780543d2d8dd6d

  • SSDEEP

    1536:9ZwzdtDx5OZdb0Odeq3J5OFOBy8NGZMOza78+NwU9EF3Jon3OUqgOOWVD9/S:bAt2Zx/d028/OIAwU9WgOOWr/S

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      cd9170ba15cae3c599fd9de8067ec33bbbc5e1c1cac90a005f26ee60060e93f7

    • Size

      140KB

    • MD5

      06c18d1cf227f53d658514ef7616c210

    • SHA1

      c7e247adaf9ffd4f397b0ae0ccbd75bb500a55b1

    • SHA256

      cd9170ba15cae3c599fd9de8067ec33bbbc5e1c1cac90a005f26ee60060e93f7

    • SHA512

      4f462327c7a2ca7bc9c4d7c51cdbc8df98326dabaaf606c681fc8aea1f37572ac44045557a66e31d3fa6e194e91e689ed0cb2bc8136e68d26b780543d2d8dd6d

    • SSDEEP

      1536:9ZwzdtDx5OZdb0Odeq3J5OFOBy8NGZMOza78+NwU9EF3Jon3OUqgOOWVD9/S:bAt2Zx/d028/OIAwU9WgOOWr/S

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks