Overview

overview

10

Static

static

10

e5e0fa93c5...a0.dll

windows7-x64

10

e5e0fa93c5...a0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5e0fa93c547480d7a5c3f456b2f43041e07251303f3a02d0173f46c47c175a0

  • Size

    51KB

  • Sample

    240522-3bt1asch6x

  • MD5

    5d805b78504230a375920d7626102ade

  • SHA1

    8780a1a3a8c13c6eba21050f63ef19a630d67d6f

  • SHA256

    e5e0fa93c547480d7a5c3f456b2f43041e07251303f3a02d0173f46c47c175a0

  • SHA512

    eecef6570796dd24bb205163e63f29437384d8c314c2abf2be1befa7c4bd734c92e4c5f3cfb5fb1670f3f98a56efa4fb336df3cb88bae0d3b954f7b666ceadae

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbo1JYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e5e0fa93c547480d7a5c3f456b2f43041e07251303f3a02d0173f46c47c175a0

    • Size

      51KB

    • MD5

      5d805b78504230a375920d7626102ade

    • SHA1

      8780a1a3a8c13c6eba21050f63ef19a630d67d6f

    • SHA256

      e5e0fa93c547480d7a5c3f456b2f43041e07251303f3a02d0173f46c47c175a0

    • SHA512

      eecef6570796dd24bb205163e63f29437384d8c314c2abf2be1befa7c4bd734c92e4c5f3cfb5fb1670f3f98a56efa4fb336df3cb88bae0d3b954f7b666ceadae

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbo1JYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks