Overview

overview

10

Static

static

1

caece8f8cc...2a.exe

windows7-x64

10

caece8f8cc...2a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    caece8f8ccb77b8a3e2ee14770e2c4b734a8573b8a0dc676be0782e27389182a

  • Size

    310KB

  • Sample

    230412-tsqvjaeh5y

  • MD5

    65deedccc1dcbe6b1cbc074c3855e0ba

  • SHA1

    0d5051e9329194a96f8836082f6e308b3520a495

  • SHA256

    caece8f8ccb77b8a3e2ee14770e2c4b734a8573b8a0dc676be0782e27389182a

  • SHA512

    c1ad0acaa2ed39ee15eb63a0c0d198862d7fc6135858c4e69ca6f901a21c42dbeb03e4429f19d3e4fd977ddd92033b8b7edff99be13c8d5d9df64f7d7695444d

  • SSDEEP

    3072:VNWlkU/r+37BO8ynhvd01vYJPp9Hfj/NTNW95xpIImWKyB:V4l9+3QZd0QPp9HfZu5LIImWv

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      caece8f8ccb77b8a3e2ee14770e2c4b734a8573b8a0dc676be0782e27389182a

    • Size

      310KB

    • MD5

      65deedccc1dcbe6b1cbc074c3855e0ba

    • SHA1

      0d5051e9329194a96f8836082f6e308b3520a495

    • SHA256

      caece8f8ccb77b8a3e2ee14770e2c4b734a8573b8a0dc676be0782e27389182a

    • SHA512

      c1ad0acaa2ed39ee15eb63a0c0d198862d7fc6135858c4e69ca6f901a21c42dbeb03e4429f19d3e4fd977ddd92033b8b7edff99be13c8d5d9df64f7d7695444d

    • SSDEEP

      3072:VNWlkU/r+37BO8ynhvd01vYJPp9Hfj/NTNW95xpIImWKyB:V4l9+3QZd0QPp9HfZu5LIImWv

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks