Overview

overview

10

Static

static

9b13950b0d...41.exe

windows7-x64

10

9b13950b0d...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b13950b0dec59f7dd09b5683c84c2fed9319c76b453260c48cbac4929947841

  • Size

    384KB

  • Sample

    221205-x63b9scc4x

  • MD5

    47a84c2465e34c1b06a3aeef4142b1d4

  • SHA1

    a05e66e4a98b3724773ae36fb0a22e20e9b04359

  • SHA256

    9b13950b0dec59f7dd09b5683c84c2fed9319c76b453260c48cbac4929947841

  • SHA512

    25b705192f33038cc57c1b81bce4971bb04941c1f363d31773288da3124fccd67ceacc6a7734befe4c6bc25d91fe750f42941beeab0b03f86d2190a634a222e6

  • SSDEEP

    12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOP:KPBjK8VlYb3P9FD

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      9b13950b0dec59f7dd09b5683c84c2fed9319c76b453260c48cbac4929947841

    • Size

      384KB

    • MD5

      47a84c2465e34c1b06a3aeef4142b1d4

    • SHA1

      a05e66e4a98b3724773ae36fb0a22e20e9b04359

    • SHA256

      9b13950b0dec59f7dd09b5683c84c2fed9319c76b453260c48cbac4929947841

    • SHA512

      25b705192f33038cc57c1b81bce4971bb04941c1f363d31773288da3124fccd67ceacc6a7734befe4c6bc25d91fe750f42941beeab0b03f86d2190a634a222e6

    • SSDEEP

      12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOP:KPBjK8VlYb3P9FD

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks