Overview

overview

10

Static

static

3

7c235f2588...6d.exe

windows7-x64

10

7c235f2588...6d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c235f2588822a89c19a10bdf2a6366d.exe

  • Size

    384KB

  • Sample

    240101-lnzmwafhbj

  • MD5

    7c235f2588822a89c19a10bdf2a6366d

  • SHA1

    c2af01f3062bb8abc226f596c2c87d400d780314

  • SHA256

    f86d1ea04db02397506dad2cdb3f6e4f8d1174ba1cd63663a178b029b5f5e147

  • SHA512

    6ee21eb7f208dadd662fc305a28e01adcd907678211b091d48a6bc2dbf24c4c404c2ed2bbd7a73e31895fcc22e803f98b8a5f772114723e9b50aa876a1d1a860

  • SSDEEP

    12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOm:KPBjK8VlYb3P9FS

Score
10/10
gh0stratpersistencerat

Malware Config

Targets

    • Target

      7c235f2588822a89c19a10bdf2a6366d.exe

    • Size

      384KB

    • MD5

      7c235f2588822a89c19a10bdf2a6366d

    • SHA1

      c2af01f3062bb8abc226f596c2c87d400d780314

    • SHA256

      f86d1ea04db02397506dad2cdb3f6e4f8d1174ba1cd63663a178b029b5f5e147

    • SHA512

      6ee21eb7f208dadd662fc305a28e01adcd907678211b091d48a6bc2dbf24c4c404c2ed2bbd7a73e31895fcc22e803f98b8a5f772114723e9b50aa876a1d1a860

    • SSDEEP

      12288:KPdK4bgeK8VL5TKjb31wgxllhz7G60i2qvyOm:KPBjK8VlYb3P9FS

    Score
    10/10
    gh0stratpersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks