Overview

overview

10

Static

static

a44143f72c...6b.exe

windows7-x64

10

a44143f72c...6b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a44143f72c965f8ad33c15a9231bfe1ddd46dacf8244948124ff1cc3ebdb9b6b

  • Size

    256KB

  • Sample

    221206-zl42gacb38

  • MD5

    aa03e416d33696f1ab90d2304eeb3ecd

  • SHA1

    00026989d0d2065b4ad3844963afae9aef41090e

  • SHA256

    a44143f72c965f8ad33c15a9231bfe1ddd46dacf8244948124ff1cc3ebdb9b6b

  • SHA512

    4375885ded6658da7c6f05a769dfb450eb96cec101132fb2a53ff67b8d49af292c75db8232a8d64a1bb32dae82dbf8018f866e386d8d8240adf3334e1b3a7b95

  • SSDEEP

    3072:tfgvgD6dEQD2ko1ayFCpEZWCfEgl9HufbQeOa1JK5FNLPYUl+HryFswxc59x9H5x:mge2QD2VH0pwpMwcROQKMLpXHl

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      a44143f72c965f8ad33c15a9231bfe1ddd46dacf8244948124ff1cc3ebdb9b6b

    • Size

      256KB

    • MD5

      aa03e416d33696f1ab90d2304eeb3ecd

    • SHA1

      00026989d0d2065b4ad3844963afae9aef41090e

    • SHA256

      a44143f72c965f8ad33c15a9231bfe1ddd46dacf8244948124ff1cc3ebdb9b6b

    • SHA512

      4375885ded6658da7c6f05a769dfb450eb96cec101132fb2a53ff67b8d49af292c75db8232a8d64a1bb32dae82dbf8018f866e386d8d8240adf3334e1b3a7b95

    • SSDEEP

      3072:tfgvgD6dEQD2ko1ayFCpEZWCfEgl9HufbQeOa1JK5FNLPYUl+HryFswxc59x9H5x:mge2QD2VH0pwpMwcROQKMLpXHl

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks