Overview

overview

10

Static

static

10

a1adaf3ffa...d4.dll

windows7-x64

10

a1adaf3ffa...d4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1adaf3ffaa163eb03a122117cfe47f0c5d2893798a9491c3f6a96c11267b0d4

  • Size

    51KB

  • Sample

    240427-j618baee97

  • MD5

    0346195c53d6ac311a6cc8fba40c33a1

  • SHA1

    a15acc1ed6a53f5c1840636cca9d2c8ff078a2d0

  • SHA256

    a1adaf3ffaa163eb03a122117cfe47f0c5d2893798a9491c3f6a96c11267b0d4

  • SHA512

    11d05a41926e5fd6b843cc17e8371ec99bd9970530794ba1f96d07dd11ae7aa7b0b16e646a103a61647201c20ac2b57773121407e684c62275cd8d4ac9c44a65

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fboNJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      a1adaf3ffaa163eb03a122117cfe47f0c5d2893798a9491c3f6a96c11267b0d4

    • Size

      51KB

    • MD5

      0346195c53d6ac311a6cc8fba40c33a1

    • SHA1

      a15acc1ed6a53f5c1840636cca9d2c8ff078a2d0

    • SHA256

      a1adaf3ffaa163eb03a122117cfe47f0c5d2893798a9491c3f6a96c11267b0d4

    • SHA512

      11d05a41926e5fd6b843cc17e8371ec99bd9970530794ba1f96d07dd11ae7aa7b0b16e646a103a61647201c20ac2b57773121407e684c62275cd8d4ac9c44a65

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fboNJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks