Overview

overview

10

Static

static

10

7c3e895f8e...cb.dll

windows7-x64

10

7c3e895f8e...cb.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c3e895f8ec224aac8ee82a66d93b6bd327c74568f5a2f751c4309c775562acb

  • Size

    899KB

  • Sample

    240427-h6qadaed2s

  • MD5

    16471065807b3e2e9a59cd57e7c2409d

  • SHA1

    4537088d7de36fd551056bfd0884469fbbb08332

  • SHA256

    7c3e895f8ec224aac8ee82a66d93b6bd327c74568f5a2f751c4309c775562acb

  • SHA512

    a9b2dba0b58843d6a234b220da231890dc7459e7e8df7902c4e3216d5b9e99784507898b2ea70740525da5ba209e66f935cf36f0fc25b7c8cc1a073d3ef5ae9b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7c3e895f8ec224aac8ee82a66d93b6bd327c74568f5a2f751c4309c775562acb

    • Size

      899KB

    • MD5

      16471065807b3e2e9a59cd57e7c2409d

    • SHA1

      4537088d7de36fd551056bfd0884469fbbb08332

    • SHA256

      7c3e895f8ec224aac8ee82a66d93b6bd327c74568f5a2f751c4309c775562acb

    • SHA512

      a9b2dba0b58843d6a234b220da231890dc7459e7e8df7902c4e3216d5b9e99784507898b2ea70740525da5ba209e66f935cf36f0fc25b7c8cc1a073d3ef5ae9b

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks