Overview

overview

10

Static

static

10

a21b7b3407...26.dll

windows7-x64

10

a21b7b3407...26.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a21b7b3407ecdb33a3e2d5de26429529dd26c40d924bb915ea89c6f43cf9e626

  • Size

    51KB

  • Sample

    240522-w525facb65

  • MD5

    b5efc3993871f34cce117948a0f584aa

  • SHA1

    20b826514f3683459d7d0df12edbaf4a1e2b5a4b

  • SHA256

    a21b7b3407ecdb33a3e2d5de26429529dd26c40d924bb915ea89c6f43cf9e626

  • SHA512

    dbf1c186c2bfa049ca7e82ebe3b27990cf983369d2d823cfe955c362b6b69d761fb6f5f79aef57831fe855c5e94738e76c2d5fc2f07f12dd932c90bea5586caa

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+qJYH5:1dWubF3n9S91BF3fboFJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      a21b7b3407ecdb33a3e2d5de26429529dd26c40d924bb915ea89c6f43cf9e626

    • Size

      51KB

    • MD5

      b5efc3993871f34cce117948a0f584aa

    • SHA1

      20b826514f3683459d7d0df12edbaf4a1e2b5a4b

    • SHA256

      a21b7b3407ecdb33a3e2d5de26429529dd26c40d924bb915ea89c6f43cf9e626

    • SHA512

      dbf1c186c2bfa049ca7e82ebe3b27990cf983369d2d823cfe955c362b6b69d761fb6f5f79aef57831fe855c5e94738e76c2d5fc2f07f12dd932c90bea5586caa

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+qJYH5:1dWubF3n9S91BF3fboFJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks