Overview

overview

10

Static

static

10

85fe925f83...f3.dll

windows7-x64

10

85fe925f83...f3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85fe925f83a7b301814205ec8be243b08973a08acaf97af8a8ccd8222a0af5f3

  • Size

    899KB

  • Sample

    240522-z8cwhahd36

  • MD5

    2b5048fdb0cae235d4bfe0154bdcd5b2

  • SHA1

    1fcc3c08fd9dc4518cf44f0e941d0e57a83946e7

  • SHA256

    85fe925f83a7b301814205ec8be243b08973a08acaf97af8a8ccd8222a0af5f3

  • SHA512

    1c24aab564e6326ab76ef5010cfc6c9f264ea541073c95bb5a83125d6a998b039a9f82cfc87645306809ed90f245910cb6e092109388ce4ba0dfcf76f142fd07

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      85fe925f83a7b301814205ec8be243b08973a08acaf97af8a8ccd8222a0af5f3

    • Size

      899KB

    • MD5

      2b5048fdb0cae235d4bfe0154bdcd5b2

    • SHA1

      1fcc3c08fd9dc4518cf44f0e941d0e57a83946e7

    • SHA256

      85fe925f83a7b301814205ec8be243b08973a08acaf97af8a8ccd8222a0af5f3

    • SHA512

      1c24aab564e6326ab76ef5010cfc6c9f264ea541073c95bb5a83125d6a998b039a9f82cfc87645306809ed90f245910cb6e092109388ce4ba0dfcf76f142fd07

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks