Overview

overview

10

Static

static

玄奥2014...��.exe

windows7-x64

10

玄奥2014...��.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83cdff5857ba6c9631159a3b76c50eae2e21ba7d7240d98706bf37e23033d610

  • Size

    192KB

  • Sample

    221123-xw51eabc2w

  • MD5

    7990c4ce10292b0fcbc2dd58e15d0883

  • SHA1

    960f6b9426de206c7ce4dc9301b3c881f0265a39

  • SHA256

    83cdff5857ba6c9631159a3b76c50eae2e21ba7d7240d98706bf37e23033d610

  • SHA512

    e5148b6cbeea65b55a9d630de12d97feb86c66fdcb02a67196266b4df0f4d5223055c474e3bf4548455da410b970b96ab8aa7a295c5554fcdd48d78a97478041

  • SSDEEP

    6144:Aec3EIjEtXz5no1uWzTBji1VAQwSywxgd6S5czUZYO:5IjEtX6QWPBji1aQwSy8TEczUZ3

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      玄奥2014最新注册机.exe

    • Size

      347KB

    • MD5

      a4f9dbee66a02cecda3d57bba39f3352

    • SHA1

      f8258b8afa18b7c9dd75a5766eedf7ccbc3dcaa6

    • SHA256

      62ec03b85ad907c53b070c26ebfe2876d1162552ce2e50c43e308725b26917ca

    • SHA512

      e4d51c43671e22f0e1ecee84b2267c3d324c74a568e0fda549a82d1dac43390cd63e5da0b8ecaf421aac0669e8790302ab8b0fe5110ef066fc8139d2ee9f77b4

    • SSDEEP

      6144:spc//////MuwTBQwRd1ZE2c/Eo4VBt4xXe/:6c//////MuwTJRdXcUVB4m

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks