Overview

overview

10

Static

static

10

5d0031d84d...4c.dll

windows7-x64

10

5d0031d84d...4c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d0031d84dc5de0525748330f376aa1b7b13fc23d61cf9adcbb2afb06f7e524c

  • Size

    899KB

  • Sample

    240522-w6rp4aca9x

  • MD5

    57d61bfafb385db61288079b1e9e3392

  • SHA1

    988b45bc51ca800006d439e0fe87fba2c722f306

  • SHA256

    5d0031d84dc5de0525748330f376aa1b7b13fc23d61cf9adcbb2afb06f7e524c

  • SHA512

    0d6991671bed0525286518b5d2340320cb733155cfbc3d6a4a4d0cfd3a26d89bd6ddd4e7af2787dd8e758dd6327927399273c8c3e77c5b257928be8de6ed3379

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXC:7wqd87VC

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5d0031d84dc5de0525748330f376aa1b7b13fc23d61cf9adcbb2afb06f7e524c

    • Size

      899KB

    • MD5

      57d61bfafb385db61288079b1e9e3392

    • SHA1

      988b45bc51ca800006d439e0fe87fba2c722f306

    • SHA256

      5d0031d84dc5de0525748330f376aa1b7b13fc23d61cf9adcbb2afb06f7e524c

    • SHA512

      0d6991671bed0525286518b5d2340320cb733155cfbc3d6a4a4d0cfd3a26d89bd6ddd4e7af2787dd8e758dd6327927399273c8c3e77c5b257928be8de6ed3379

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXC:7wqd87VC

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks