Analysis
-
max time kernel
143s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 19:17
General
-
Target
017800f1ad1184a9b2f876609ee3e734.exe
-
Size
696KB
-
MD5
017800f1ad1184a9b2f876609ee3e734
-
SHA1
a725b46d1ce585d6f7a8f3e88143dfb0faf032cb
-
SHA256
65ed1a26e4779fec9ee9577f1634848833dc644e2ee71edeb18e2e33511bafa9
-
SHA512
e842bd687445415b959eeda62d808b3220566144628565e308e4f4cf2244f31f896c1d2b4579b2f820fee0597ceb799af82bd0af4b6fa2abbc4ed4be33673cbc
-
SSDEEP
12288:XDHRztUMSpCO0kBXYB7sYtT1RpQrL16q9ASkge/jP1uQz:TxzCrjti7sYTFQP9ASkL/jduQ
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 2 IoCs
-
Gh0strat
Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\017800f1ad1184a9b2f876609ee3e734.exe"C:\Users\Admin\AppData\Local\Temp\017800f1ad1184a9b2f876609ee3e734.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
716KB
-
Filesize
716KB