Overview

overview

10

Static

static

10

3ac910a10a...69.exe

windows7-x64

10

3ac910a10a...69.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ac910a10ad7933ae0c53bcf5e82cb69

  • Size

    224KB

  • Sample

    231231-xg2pfacdcp

  • MD5

    3ac910a10ad7933ae0c53bcf5e82cb69

  • SHA1

    e09f2ec645d0dcbf76e955237729a80849f27f41

  • SHA256

    8f3af33b765b68ed5f11ae7581c503c55c5b5d6ee21b05e8aeb6b614eccf92a3

  • SHA512

    7c34cc62c1deca66b045a628736e8f66bec82a96914d6168269145ae61283c99156a90931f5db305a08a35a1537b4976a4312c3167df7a422049603c6570109e

  • SSDEEP

    3072:qrz+ftqum3T40D758q4Q9MEbjRM9MeNkDw7OHNOZLhn+8KCPKQOcBd:ro37D7+yRwhNkDw7IEz

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      3ac910a10ad7933ae0c53bcf5e82cb69

    • Size

      224KB

    • MD5

      3ac910a10ad7933ae0c53bcf5e82cb69

    • SHA1

      e09f2ec645d0dcbf76e955237729a80849f27f41

    • SHA256

      8f3af33b765b68ed5f11ae7581c503c55c5b5d6ee21b05e8aeb6b614eccf92a3

    • SHA512

      7c34cc62c1deca66b045a628736e8f66bec82a96914d6168269145ae61283c99156a90931f5db305a08a35a1537b4976a4312c3167df7a422049603c6570109e

    • SSDEEP

      3072:qrz+ftqum3T40D758q4Q9MEbjRM9MeNkDw7OHNOZLhn+8KCPKQOcBd:ro37D7+yRwhNkDw7IEz

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks