Overview

overview

10

Static

static

10

ae71716ca5...a1.dll

windows7-x64

10

ae71716ca5...a1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae71716ca5e7b8aeba987591ea74a011afc97b2ea188014225b8a6a8ef1ecaa1

  • Size

    105KB

  • Sample

    221204-v46kssef4s

  • MD5

    f130b2a825263b2766f3c5108270ab0d

  • SHA1

    3de865d14cebf181e3ab9cda3c8929dc7e447454

  • SHA256

    ae71716ca5e7b8aeba987591ea74a011afc97b2ea188014225b8a6a8ef1ecaa1

  • SHA512

    deb0a8e0e44008c9f194140114bdd5ce4f009d1188c623a7b4cc4ae9caf33db05b0da8043addb54bd3803f9712b1d020fa64cfae7b2383e894625b4cf6e13782

  • SSDEEP

    3072:BvBKS+26Y8zoz4EfZRzUKR/F4pEIbybZuwu1Uq:N8tA1fYmFEX2ZuwuC

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      ae71716ca5e7b8aeba987591ea74a011afc97b2ea188014225b8a6a8ef1ecaa1

    • Size

      105KB

    • MD5

      f130b2a825263b2766f3c5108270ab0d

    • SHA1

      3de865d14cebf181e3ab9cda3c8929dc7e447454

    • SHA256

      ae71716ca5e7b8aeba987591ea74a011afc97b2ea188014225b8a6a8ef1ecaa1

    • SHA512

      deb0a8e0e44008c9f194140114bdd5ce4f009d1188c623a7b4cc4ae9caf33db05b0da8043addb54bd3803f9712b1d020fa64cfae7b2383e894625b4cf6e13782

    • SSDEEP

      3072:BvBKS+26Y8zoz4EfZRzUKR/F4pEIbybZuwu1Uq:N8tA1fYmFEX2ZuwuC

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks