Overview

overview

10

Static

static

10

6343b63be3...30.dll

windows7-x64

10

6343b63be3...30.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6343b63be37e02408c7ffa459aac31359237180bb347a93fc7661a07120f0a30

  • Size

    133KB

  • Sample

    240319-n7hjtacd4w

  • MD5

    e43212248670b88c77e57902ec38145c

  • SHA1

    a90d9b433b6e5d2ed8eef5c95a108170df10ebad

  • SHA256

    6343b63be37e02408c7ffa459aac31359237180bb347a93fc7661a07120f0a30

  • SHA512

    c0bca8da5d30d095b053441b5b75b68b93cfa4128d1c184da6a49c97d17e85473d52acc8d9934c8927b481eba70a9aac92af416d44a048132ad1fb4f837810a4

  • SSDEEP

    3072:LUDBHy4BBy6eFJrmmIewRxM6JSQTqGd4Pwc3q:L0yB6oJrcRZQcqGywq

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      6343b63be37e02408c7ffa459aac31359237180bb347a93fc7661a07120f0a30

    • Size

      133KB

    • MD5

      e43212248670b88c77e57902ec38145c

    • SHA1

      a90d9b433b6e5d2ed8eef5c95a108170df10ebad

    • SHA256

      6343b63be37e02408c7ffa459aac31359237180bb347a93fc7661a07120f0a30

    • SHA512

      c0bca8da5d30d095b053441b5b75b68b93cfa4128d1c184da6a49c97d17e85473d52acc8d9934c8927b481eba70a9aac92af416d44a048132ad1fb4f837810a4

    • SSDEEP

      3072:LUDBHy4BBy6eFJrmmIewRxM6JSQTqGd4Pwc3q:L0yB6oJrcRZQcqGywq

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks