Overview

overview

10

Static

static

10

ec64bb28c3...83.dll

windows7-x64

10

ec64bb28c3...83.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec64bb28c37c50b02fe00638993f8d9af8a9b7e51f77da895b48f6c412518e83

  • Size

    132KB

  • Sample

    221206-1nwzbaad6x

  • MD5

    e5f548e9c49c4b35f76c2b6b01ad763b

  • SHA1

    861ba66aa70c21dc45674dfd67410d370cbf1382

  • SHA256

    ec64bb28c37c50b02fe00638993f8d9af8a9b7e51f77da895b48f6c412518e83

  • SHA512

    44ed9f5a6f25f150b64eef486aab5c4d4aadcb222d80ee51df7f315539820aa4aac21f030b020845b6579a357d16d4863302b1557be1c13d376bccf6f3d1b645

  • SSDEEP

    3072:+AsU4cQIuP1YTzA42vdwe5jma/cQbqRNbqI6ZzO9B3Q:qIa8Afvqem4yRMnzOfA

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      ec64bb28c37c50b02fe00638993f8d9af8a9b7e51f77da895b48f6c412518e83

    • Size

      132KB

    • MD5

      e5f548e9c49c4b35f76c2b6b01ad763b

    • SHA1

      861ba66aa70c21dc45674dfd67410d370cbf1382

    • SHA256

      ec64bb28c37c50b02fe00638993f8d9af8a9b7e51f77da895b48f6c412518e83

    • SHA512

      44ed9f5a6f25f150b64eef486aab5c4d4aadcb222d80ee51df7f315539820aa4aac21f030b020845b6579a357d16d4863302b1557be1c13d376bccf6f3d1b645

    • SSDEEP

      3072:+AsU4cQIuP1YTzA42vdwe5jma/cQbqRNbqI6ZzO9B3Q:qIa8Afvqem4yRMnzOfA

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks