Overview

overview

10

Static

static

fc1ec510e7...6d.exe

windows7-x64

8

fc1ec510e7...6d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc1ec510e7a396c0b7554dd6e4790f494f89fc9c19a2fb5461bc464dce627f6d

  • Size

    96KB

  • Sample

    221203-czj7wsga26

  • MD5

    d94ed3f518bd31528dcf119900e8de07

  • SHA1

    130a6938d957de0d70cf3aa51bb821a691c9c2c4

  • SHA256

    fc1ec510e7a396c0b7554dd6e4790f494f89fc9c19a2fb5461bc464dce627f6d

  • SHA512

    bc5d97578649bea1c08f8e69500e794fefe598e2c33fc46646a7c4172d84d7ef14384e73caeb51e141c5b926bf438f0b95cc5dd4dc8e13971f242e290964ea86

  • SSDEEP

    1536:CMFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prRmw2tRs/yl:CeS4jHS8q/3nTzePCwNUh4E9Rmw2Qyl

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      fc1ec510e7a396c0b7554dd6e4790f494f89fc9c19a2fb5461bc464dce627f6d

    • Size

      96KB

    • MD5

      d94ed3f518bd31528dcf119900e8de07

    • SHA1

      130a6938d957de0d70cf3aa51bb821a691c9c2c4

    • SHA256

      fc1ec510e7a396c0b7554dd6e4790f494f89fc9c19a2fb5461bc464dce627f6d

    • SHA512

      bc5d97578649bea1c08f8e69500e794fefe598e2c33fc46646a7c4172d84d7ef14384e73caeb51e141c5b926bf438f0b95cc5dd4dc8e13971f242e290964ea86

    • SSDEEP

      1536:CMFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prRmw2tRs/yl:CeS4jHS8q/3nTzePCwNUh4E9Rmw2Qyl

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks