Overview

overview

10

Static

static

10

06242bfbc0...4f.exe

windows7-x64

10

06242bfbc0...4f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06242bfbc0e628aa610cc73511bf904f

  • Size

    983KB

  • Sample

    231229-2sxbbaccg7

  • MD5

    06242bfbc0e628aa610cc73511bf904f

  • SHA1

    abbc57ae0d4f6af32e20c0ce937c50e5f8928b77

  • SHA256

    66d43cc10e783a2740852dbe6a543fe645785efd2cda07aa4a7a542106fba51d

  • SHA512

    c2b29bed37e41557008c6439713ea16c991ff6dabf44f9a83043d30f40168ac4c95a26a59577f64143737f6eda089eca35ead046e6463085a0abc1d37f67a9d6

  • SSDEEP

    12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZFVR:iM5j8Z3aKHx5r+TuxX+IwffFZFVR

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      06242bfbc0e628aa610cc73511bf904f

    • Size

      983KB

    • MD5

      06242bfbc0e628aa610cc73511bf904f

    • SHA1

      abbc57ae0d4f6af32e20c0ce937c50e5f8928b77

    • SHA256

      66d43cc10e783a2740852dbe6a543fe645785efd2cda07aa4a7a542106fba51d

    • SHA512

      c2b29bed37e41557008c6439713ea16c991ff6dabf44f9a83043d30f40168ac4c95a26a59577f64143737f6eda089eca35ead046e6463085a0abc1d37f67a9d6

    • SSDEEP

      12288:iM5jZKbBL3aKHx5r+TuxX+fWbwFBfdGmZFVR:iM5j8Z3aKHx5r+TuxX+IwffFZFVR

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks