Overview

overview

10

Static

static

3514e6d60f...f8.dll

windows7-x64

10

3514e6d60f...f8.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3514e6d60f7ae69f17e32e9600a8e115396018d99859d52f4364c1a7df62e4f8

  • Size

    53KB

  • Sample

    221201-ftstmaga93

  • MD5

    d3c0c1e418a91c5e3c5dfe78bdf7d750

  • SHA1

    11390c66fac8244c5998cf31d465b34d040205de

  • SHA256

    3514e6d60f7ae69f17e32e9600a8e115396018d99859d52f4364c1a7df62e4f8

  • SHA512

    fe440cb5a8291ef7ea274bfbf98937d718e5c8c6ed979377f26afb0d6bd3e9cc8e855ffac4336d6274d09c2d9d4f1a4b0317b10214d7d08d263252f57c5610e1

  • SSDEEP

    768:nNpEVNX+m3WpVtUKI5ZFsBRqZiY/0CiBfHaq6T1JKWyocenQwWx4IE2i3t:NyrnmpDUKI5ZYmv/IF/6HcoPnaxLr8t

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      3514e6d60f7ae69f17e32e9600a8e115396018d99859d52f4364c1a7df62e4f8

    • Size

      53KB

    • MD5

      d3c0c1e418a91c5e3c5dfe78bdf7d750

    • SHA1

      11390c66fac8244c5998cf31d465b34d040205de

    • SHA256

      3514e6d60f7ae69f17e32e9600a8e115396018d99859d52f4364c1a7df62e4f8

    • SHA512

      fe440cb5a8291ef7ea274bfbf98937d718e5c8c6ed979377f26afb0d6bd3e9cc8e855ffac4336d6274d09c2d9d4f1a4b0317b10214d7d08d263252f57c5610e1

    • SSDEEP

      768:nNpEVNX+m3WpVtUKI5ZFsBRqZiY/0CiBfHaq6T1JKWyocenQwWx4IE2i3t:NyrnmpDUKI5ZYmv/IF/6HcoPnaxLr8t

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Sets DLL path for service in the registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks