Overview

overview

10

Static

static

3

2856bf3e4f...69.dll

windows7-x64

10

2856bf3e4f...69.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2856bf3e4f7be127bd854998b1313369

  • Size

    58KB

  • Sample

    231231-e65hhscfam

  • MD5

    2856bf3e4f7be127bd854998b1313369

  • SHA1

    0335e0033267f27ee49aecd7bda109e0f831cbc6

  • SHA256

    5cb1ec0ac594ceef42be8be8361f6ad27b63468b2a84509f61f64528413f7e88

  • SHA512

    cfdde82bb39bfe024f09cefc5b086a51b7cadab9bc996715f07d28a38ec0e23fd69dcc4ec6cf9d67b79b0438331b281f26be3028c53a8ecc959065f6436dea24

  • SSDEEP

    768:Z74XSDgbahXrerQvaONvqm87WRmrQ1JaGaeb9fME7MhHrGpJByuXw0+d8wKpqCaZ:BXr9aONP87imrya9eRnMyrXj+dqpF8

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      2856bf3e4f7be127bd854998b1313369

    • Size

      58KB

    • MD5

      2856bf3e4f7be127bd854998b1313369

    • SHA1

      0335e0033267f27ee49aecd7bda109e0f831cbc6

    • SHA256

      5cb1ec0ac594ceef42be8be8361f6ad27b63468b2a84509f61f64528413f7e88

    • SHA512

      cfdde82bb39bfe024f09cefc5b086a51b7cadab9bc996715f07d28a38ec0e23fd69dcc4ec6cf9d67b79b0438331b281f26be3028c53a8ecc959065f6436dea24

    • SSDEEP

      768:Z74XSDgbahXrerQvaONvqm87WRmrQ1JaGaeb9fME7MhHrGpJByuXw0+d8wKpqCaZ:BXr9aONP87imrya9eRnMyrXj+dqpF8

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks