Overview

overview

10

Static

static

10

fcf4ee2868...c6.exe

windows7-x64

4

fcf4ee2868...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcf4ee2868a0f2607a0998fcefc2741285c3d6aa41172b1dfd4e0a014c0bf7c6

  • Size

    146KB

  • Sample

    221204-v31yxsee5y

  • MD5

    c48f2e2aee9a14a1811f8d19d6b0b879

  • SHA1

    95f6695525c628ed4cdfce0c516a9897c65234ee

  • SHA256

    fcf4ee2868a0f2607a0998fcefc2741285c3d6aa41172b1dfd4e0a014c0bf7c6

  • SHA512

    e98573d9362b9c51b14f408e1d9e15a381cc716cfea4233d6c65d2920df61160a2a7c93ea200e091059c550b3d7ceddb1be9fbc910a12bbf0c373dbc0a2ea632

  • SSDEEP

    3072:ggEehZ6lngDMYUxHkq15yoY0f4S07tVaTqXuz1KJoZAo5LH5u:ggEehkHkmMoY0xoV00uz1PZAS

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      fcf4ee2868a0f2607a0998fcefc2741285c3d6aa41172b1dfd4e0a014c0bf7c6

    • Size

      146KB

    • MD5

      c48f2e2aee9a14a1811f8d19d6b0b879

    • SHA1

      95f6695525c628ed4cdfce0c516a9897c65234ee

    • SHA256

      fcf4ee2868a0f2607a0998fcefc2741285c3d6aa41172b1dfd4e0a014c0bf7c6

    • SHA512

      e98573d9362b9c51b14f408e1d9e15a381cc716cfea4233d6c65d2920df61160a2a7c93ea200e091059c550b3d7ceddb1be9fbc910a12bbf0c373dbc0a2ea632

    • SSDEEP

      3072:ggEehZ6lngDMYUxHkq15yoY0f4S07tVaTqXuz1KJoZAo5LH5u:ggEehkHkmMoY0xoV00uz1PZAS

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks