Overview

overview

10

Static

static

10

e28f1c6bb4...1b.dll

windows7-x64

10

e28f1c6bb4...1b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e28f1c6bb4ae973f2629381b6b628a4cf58518a2be9066eec3f4bcf917ea5c1b

  • Size

    153KB

  • Sample

    221204-b4a94sah6z

  • MD5

    1bb821e248b4e9e55ddc7e23bbe1b640

  • SHA1

    8027f20ec62f2e4c067f09be61bae54cf957932a

  • SHA256

    e28f1c6bb4ae973f2629381b6b628a4cf58518a2be9066eec3f4bcf917ea5c1b

  • SHA512

    026781f8a6c94957741acae0697fd61f835cfc5733e6d769a18722d8e9c36584bab034b714583a5951d4852a4e803ab775d16a08b8cdeee4f3cd26d793be8ca9

  • SSDEEP

    3072:CvYAuBmaZQvO5dl47oyDS0jt26x8cf1TTt2baxLo1o4+nBk:5FZUUdl+T9w6CIZt2G61fgk

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      e28f1c6bb4ae973f2629381b6b628a4cf58518a2be9066eec3f4bcf917ea5c1b

    • Size

      153KB

    • MD5

      1bb821e248b4e9e55ddc7e23bbe1b640

    • SHA1

      8027f20ec62f2e4c067f09be61bae54cf957932a

    • SHA256

      e28f1c6bb4ae973f2629381b6b628a4cf58518a2be9066eec3f4bcf917ea5c1b

    • SHA512

      026781f8a6c94957741acae0697fd61f835cfc5733e6d769a18722d8e9c36584bab034b714583a5951d4852a4e803ab775d16a08b8cdeee4f3cd26d793be8ca9

    • SSDEEP

      3072:CvYAuBmaZQvO5dl47oyDS0jt26x8cf1TTt2baxLo1o4+nBk:5FZUUdl+T9w6CIZt2G61fgk

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks