Overview

overview

10

Static

static

b288050469...46.exe

windows7-x64

10

b288050469...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2880504697aa2c7df3a6a78c8b4bf5cba8c65857d6e1890d6a8f7683c77fa46

  • Size

    89KB

  • Sample

    221128-krc3lsah56

  • MD5

    26a4639a3b9b50f44beb1e474d227c4f

  • SHA1

    92e9220e268965c98136400db4f36c45c1ce717c

  • SHA256

    b2880504697aa2c7df3a6a78c8b4bf5cba8c65857d6e1890d6a8f7683c77fa46

  • SHA512

    e937cf6f65115e04bc690181c1adb8bbcc83f3c8a50385ea9ae721aa772be26de37ab6ac61e6c4fa5c3f8f93c0bfbefaddb0b8c315da45efab64880a3c31b66c

  • SSDEEP

    1536:QXYLnC0atiq+9Cc73McaTBFb0bJ+oa/xrpnHTlyojsjxNe22JjIHMNL2jwfe:QXZ0hq+Yc7Hf4oa5r5sojsj+oMRu

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      b2880504697aa2c7df3a6a78c8b4bf5cba8c65857d6e1890d6a8f7683c77fa46

    • Size

      89KB

    • MD5

      26a4639a3b9b50f44beb1e474d227c4f

    • SHA1

      92e9220e268965c98136400db4f36c45c1ce717c

    • SHA256

      b2880504697aa2c7df3a6a78c8b4bf5cba8c65857d6e1890d6a8f7683c77fa46

    • SHA512

      e937cf6f65115e04bc690181c1adb8bbcc83f3c8a50385ea9ae721aa772be26de37ab6ac61e6c4fa5c3f8f93c0bfbefaddb0b8c315da45efab64880a3c31b66c

    • SSDEEP

      1536:QXYLnC0atiq+9Cc73McaTBFb0bJ+oa/xrpnHTlyojsjxNe22JjIHMNL2jwfe:QXZ0hq+Yc7Hf4oa5r5sojsj+oMRu

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks