Overview

overview

10

Static

static

10

00de4461d8...c1.dll

windows7-x64

1

00de4461d8...c1.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00de4461d8f74018e71ba106871b74c1

  • Size

    152KB

  • Sample

    231229-xeqt6adben

  • MD5

    00de4461d8f74018e71ba106871b74c1

  • SHA1

    2b6d4c830d037c56a60329d42c419796924afc46

  • SHA256

    1b61f15393c99c92a150e7c05c44de474a2b19f5c42e073414754dc9039179a5

  • SHA512

    3c1c0c2867a2d24295642b16761a6d090e8b9e095e7874c4b45eb17f219803e2661f66b8bf9f9373dcca44f48b0cf0794a7efd924417e9b6b7f64419a7158238

  • SSDEEP

    3072:7sWlWVAqoEeO/V1VrNYQsCA+HFSNv63TBft6nob2:QWlm9DNYVEHyv63TBl6nob

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      00de4461d8f74018e71ba106871b74c1

    • Size

      152KB

    • MD5

      00de4461d8f74018e71ba106871b74c1

    • SHA1

      2b6d4c830d037c56a60329d42c419796924afc46

    • SHA256

      1b61f15393c99c92a150e7c05c44de474a2b19f5c42e073414754dc9039179a5

    • SHA512

      3c1c0c2867a2d24295642b16761a6d090e8b9e095e7874c4b45eb17f219803e2661f66b8bf9f9373dcca44f48b0cf0794a7efd924417e9b6b7f64419a7158238

    • SSDEEP

      3072:7sWlWVAqoEeO/V1VrNYQsCA+HFSNv63TBft6nob2:QWlm9DNYVEHyv63TBl6nob

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks