Overview

overview

10

Static

static

10

b5d366e5d4...b2.dll

windows7-x64

10

b5d366e5d4...b2.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5d366e5d4822cde80c8c3ea623d20b2

  • Size

    119KB

  • Sample

    240305-2ggfqacd85

  • MD5

    b5d366e5d4822cde80c8c3ea623d20b2

  • SHA1

    a94d7745f87cd53ef66a053ec7eb1f9534d29bb9

  • SHA256

    7f40c027e20fc18683d237028acf8bc70a2772ba24051b7aad51088e677588a4

  • SHA512

    15c512dc8de20b29f26ecc9074c189825db0daee3b92e75e809b1be646d9b480ff01c06602593ef559cf31cb0863e207cd4010c53e80c813b133f33c802294c1

  • SSDEEP

    3072:1lqfM4TYZesGO4Qg/0ilm37GBYfiA+SIML+HsZwUN:1lqfTY4Yjg/0VqY6hMLruk

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      b5d366e5d4822cde80c8c3ea623d20b2

    • Size

      119KB

    • MD5

      b5d366e5d4822cde80c8c3ea623d20b2

    • SHA1

      a94d7745f87cd53ef66a053ec7eb1f9534d29bb9

    • SHA256

      7f40c027e20fc18683d237028acf8bc70a2772ba24051b7aad51088e677588a4

    • SHA512

      15c512dc8de20b29f26ecc9074c189825db0daee3b92e75e809b1be646d9b480ff01c06602593ef559cf31cb0863e207cd4010c53e80c813b133f33c802294c1

    • SSDEEP

      3072:1lqfM4TYZesGO4Qg/0ilm37GBYfiA+SIML+HsZwUN:1lqfTY4Yjg/0VqY6hMLruk

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks