Overview

overview

10

Static

static

10

cc87af60d7...a9.dll

windows7-x64

10

cc87af60d7...a9.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc87af60d7b6872f3076434961d42618d22aa03c162d1a181c30f633d9f141a9

  • Size

    141KB

  • Sample

    221204-b3ssrsah4v

  • MD5

    a6c7c4aeae6991da771b20149555d03b

  • SHA1

    1a32fe0c0c115cff447351d428fb79bf0ca47a24

  • SHA256

    cc87af60d7b6872f3076434961d42618d22aa03c162d1a181c30f633d9f141a9

  • SHA512

    65eebddfe8c8c4da8444bf91ab172f449fa5c5b66417d0ec566689045c11ab9808dfc4b1895fcf179a314f9613af2266df9d296346684e2a605951543bf73ae4

  • SSDEEP

    3072:0evJuTj9jxXCtte4FO6l4J0cyoDm8PZkBFM:Zvkutt8CiioSKkBq

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      cc87af60d7b6872f3076434961d42618d22aa03c162d1a181c30f633d9f141a9

    • Size

      141KB

    • MD5

      a6c7c4aeae6991da771b20149555d03b

    • SHA1

      1a32fe0c0c115cff447351d428fb79bf0ca47a24

    • SHA256

      cc87af60d7b6872f3076434961d42618d22aa03c162d1a181c30f633d9f141a9

    • SHA512

      65eebddfe8c8c4da8444bf91ab172f449fa5c5b66417d0ec566689045c11ab9808dfc4b1895fcf179a314f9613af2266df9d296346684e2a605951543bf73ae4

    • SSDEEP

      3072:0evJuTj9jxXCtte4FO6l4J0cyoDm8PZkBFM:Zvkutt8CiioSKkBq

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks