Overview

overview

10

Static

static

3

NEAS.3b443...00.exe

windows7-x64

10

NEAS.3b443...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.3b4435c492862dbcbe76824854c02600.exe

  • Size

    135KB

  • Sample

    231014-wfhz9sbc55

  • MD5

    3b4435c492862dbcbe76824854c02600

  • SHA1

    9582f5a6baa9a20a67d8aef685f5845715794d73

  • SHA256

    6af6e64202cb3703d3b054d33d7cea6514bd583a07b81148dddc82194df830e8

  • SHA512

    d016e4dc26a3593aba3ab036ded8f70e4a3ded1af7ab965d2d03d4df98ad8b7083dd56e5f66148f1ba233f292f20f9693138e522ece2d0ee3d4aaa39eac2bb73

  • SSDEEP

    3072:e02gsmbHGhqCkQINRiUsIPZLJh90vbXDztaZ14a8l:87m6hqCfysKEz8Z1Fg

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      NEAS.3b4435c492862dbcbe76824854c02600.exe

    • Size

      135KB

    • MD5

      3b4435c492862dbcbe76824854c02600

    • SHA1

      9582f5a6baa9a20a67d8aef685f5845715794d73

    • SHA256

      6af6e64202cb3703d3b054d33d7cea6514bd583a07b81148dddc82194df830e8

    • SHA512

      d016e4dc26a3593aba3ab036ded8f70e4a3ded1af7ab965d2d03d4df98ad8b7083dd56e5f66148f1ba233f292f20f9693138e522ece2d0ee3d4aaa39eac2bb73

    • SSDEEP

      3072:e02gsmbHGhqCkQINRiUsIPZLJh90vbXDztaZ14a8l:87m6hqCfysKEz8Z1Fg

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks