Overview

overview

10

Static

static

3

7832eca64d...d8.dll

windows7-x64

10

7832eca64d...d8.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7832eca64d5e4b68e60e4a9038aa3ad8

  • Size

    46KB

  • Sample

    240126-x7tfracgd7

  • MD5

    7832eca64d5e4b68e60e4a9038aa3ad8

  • SHA1

    6c58e11ff85a9038b9e4c05928d160cfd8a158f5

  • SHA256

    2787b469b7075ba5af8ed13b63b53ae346bcd97d1d20b245fdc50a2c21205cb5

  • SHA512

    c8a5a96adb3ca4cc71be2b1cf3f984507f4a28618483c472cde83a2833f879b643b59c00eb8faf7513920a9df1d2d9383e77e842626cd12ee97bada42f0bc7c0

  • SSDEEP

    768:uVh2A/k1FwRh6+bYQ4G58pWDvySqfe4Z9KIa5OwG3j0/Z7XF+52e5Nu+v:uOAUwDbbYQ958Zz/9KI07Z00e5X

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      7832eca64d5e4b68e60e4a9038aa3ad8

    • Size

      46KB

    • MD5

      7832eca64d5e4b68e60e4a9038aa3ad8

    • SHA1

      6c58e11ff85a9038b9e4c05928d160cfd8a158f5

    • SHA256

      2787b469b7075ba5af8ed13b63b53ae346bcd97d1d20b245fdc50a2c21205cb5

    • SHA512

      c8a5a96adb3ca4cc71be2b1cf3f984507f4a28618483c472cde83a2833f879b643b59c00eb8faf7513920a9df1d2d9383e77e842626cd12ee97bada42f0bc7c0

    • SSDEEP

      768:uVh2A/k1FwRh6+bYQ4G58pWDvySqfe4Z9KIa5OwG3j0/Z7XF+52e5Nu+v:uOAUwDbbYQ958Zz/9KI07Z00e5X

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Drops file in Drivers directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks