Overview

overview

10

Static

static

926b0ae1d3...b0.exe

windows7-x64

10

926b0ae1d3...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    926b0ae1d398a16662b07a76550c6359012942ca92b8bdbf1d0141fa62b031b0

  • Size

    165KB

  • Sample

    221202-bj9xyach9v

  • MD5

    5dd8d2449ff05519f76ca643bb39ecaa

  • SHA1

    93a2ffe24ae913de1ab73ccfe1fcc373e6d3c811

  • SHA256

    926b0ae1d398a16662b07a76550c6359012942ca92b8bdbf1d0141fa62b031b0

  • SHA512

    0a90aa4bb67acbf48f60a32e8867c06d6c9650f8ed038ec351ca24562d467addf4130fb07f4e113bcdd015594ab89db2e02bf8efe49a0d16a44d8aaf918de770

  • SSDEEP

    3072:AimVmT9/MmOiruR85yEVhJRmkDS8P/X6yAi+B1CwGla+ZIhnofT1b5ZD0a:ANIMmOiSs1Q38HqyAG/52dofTVj/

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      926b0ae1d398a16662b07a76550c6359012942ca92b8bdbf1d0141fa62b031b0

    • Size

      165KB

    • MD5

      5dd8d2449ff05519f76ca643bb39ecaa

    • SHA1

      93a2ffe24ae913de1ab73ccfe1fcc373e6d3c811

    • SHA256

      926b0ae1d398a16662b07a76550c6359012942ca92b8bdbf1d0141fa62b031b0

    • SHA512

      0a90aa4bb67acbf48f60a32e8867c06d6c9650f8ed038ec351ca24562d467addf4130fb07f4e113bcdd015594ab89db2e02bf8efe49a0d16a44d8aaf918de770

    • SSDEEP

      3072:AimVmT9/MmOiruR85yEVhJRmkDS8P/X6yAi+B1CwGla+ZIhnofT1b5ZD0a:ANIMmOiSs1Q38HqyAG/52dofTVj/

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks