Overview

overview

10

Static

static

3

3618b9794c...4b.exe

windows7-x64

10

3618b9794c...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b

  • Size

    134KB

  • Sample

    230922-wc7t8ahd81

  • MD5

    9600202e9919aa76d669a8a5115dfeb8

  • SHA1

    9bd82a367d94ccf349338f4ae4a266ff600785f0

  • SHA256

    3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b

  • SHA512

    17905a5ade7a056287a56086411faac570f20721ef56e0d56dafbbba2f478e3e49d1b4e6228d3d62231e7c8f7a58ffa1591b36d67439de2b3430bf4354eed93f

  • SSDEEP

    3072:bUD9JxpzoSIP9tKXYPgqtA8+FnH07e9R23RnvU:bUD9JxpzozP6vq+80nU7zR

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b

    • Size

      134KB

    • MD5

      9600202e9919aa76d669a8a5115dfeb8

    • SHA1

      9bd82a367d94ccf349338f4ae4a266ff600785f0

    • SHA256

      3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b

    • SHA512

      17905a5ade7a056287a56086411faac570f20721ef56e0d56dafbbba2f478e3e49d1b4e6228d3d62231e7c8f7a58ffa1591b36d67439de2b3430bf4354eed93f

    • SSDEEP

      3072:bUD9JxpzoSIP9tKXYPgqtA8+FnH07e9R23RnvU:bUD9JxpzozP6vq+80nU7zR

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks