Overview

overview

10

Static

static

10

dab44b7b9e...ab.dll

windows7-x64

10

dab44b7b9e...ab.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dab44b7b9e1b4ab24d6be2b819931ca471356e39d3b03fbb3cd4548626b81bab

  • Size

    899KB

  • Sample

    240522-2blhgsbb31

  • MD5

    c4245edff97481318762ebb33e07c375

  • SHA1

    7d8e5c2fb6a949021a4b3e90224034f951c9634d

  • SHA256

    dab44b7b9e1b4ab24d6be2b819931ca471356e39d3b03fbb3cd4548626b81bab

  • SHA512

    a73f0d81d681c4aef129a5ca5590371c918d4cf704a99e0ce1fa38347630824f872b0e8c7887dccfa1fa26ee07ed90eeceda6786f4d31352b9969fa9ec0c1a57

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      dab44b7b9e1b4ab24d6be2b819931ca471356e39d3b03fbb3cd4548626b81bab

    • Size

      899KB

    • MD5

      c4245edff97481318762ebb33e07c375

    • SHA1

      7d8e5c2fb6a949021a4b3e90224034f951c9634d

    • SHA256

      dab44b7b9e1b4ab24d6be2b819931ca471356e39d3b03fbb3cd4548626b81bab

    • SHA512

      a73f0d81d681c4aef129a5ca5590371c918d4cf704a99e0ce1fa38347630824f872b0e8c7887dccfa1fa26ee07ed90eeceda6786f4d31352b9969fa9ec0c1a57

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks