Overview

overview

10

Static

static

b52f2addd7...a1.exe

windows7-x64

8

b52f2addd7...a1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b52f2addd7a78d3692c4aa2fe4e1f076aa3f997be4dc11b4f1f4edc598c33ea1

  • Size

    95KB

  • Sample

    221130-2w2efafg9x

  • MD5

    24d10f2e945e37d8c32296931758388b

  • SHA1

    37a8bcdf7f208720aa8617f3909f81a12ea7d5cb

  • SHA256

    b52f2addd7a78d3692c4aa2fe4e1f076aa3f997be4dc11b4f1f4edc598c33ea1

  • SHA512

    1264f50ad4a1553f80fdc9e69970a493dc66b5791250da92f73f879abac494efacec6d03498dddd240ea9ffdd4331698909b29da71441bdc7936e1e22905c45e

  • SSDEEP

    1536:fHFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prnMW5mb5EOs:fxS4jHS8q/3nTzePCwNUh4E9nWbGOs

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      b52f2addd7a78d3692c4aa2fe4e1f076aa3f997be4dc11b4f1f4edc598c33ea1

    • Size

      95KB

    • MD5

      24d10f2e945e37d8c32296931758388b

    • SHA1

      37a8bcdf7f208720aa8617f3909f81a12ea7d5cb

    • SHA256

      b52f2addd7a78d3692c4aa2fe4e1f076aa3f997be4dc11b4f1f4edc598c33ea1

    • SHA512

      1264f50ad4a1553f80fdc9e69970a493dc66b5791250da92f73f879abac494efacec6d03498dddd240ea9ffdd4331698909b29da71441bdc7936e1e22905c45e

    • SSDEEP

      1536:fHFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prnMW5mb5EOs:fxS4jHS8q/3nTzePCwNUh4E9nWbGOs

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks