Overview

overview

10

Static

static

10

ce8cbb208c...1f.dll

windows7-x64

10

ce8cbb208c...1f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce8cbb208c7b988987c52f8164ad366d8eba583217e1735974f2de0a0d8d601f

  • Size

    899KB

  • Sample

    240523-f78f8sfc66

  • MD5

    c0da32d4601a3c48b62bff727ebedd8a

  • SHA1

    6c84553f25986150ed693805f25a8812ff3c0b80

  • SHA256

    ce8cbb208c7b988987c52f8164ad366d8eba583217e1735974f2de0a0d8d601f

  • SHA512

    f53c86515e41a6cec5d6b1b1accb2282c8e41fe26126146bdd72463a8919242fb651bb20ed65e022f03f7facbdac9d9c177cee08603fdc96e7d334a8f26bd523

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ce8cbb208c7b988987c52f8164ad366d8eba583217e1735974f2de0a0d8d601f

    • Size

      899KB

    • MD5

      c0da32d4601a3c48b62bff727ebedd8a

    • SHA1

      6c84553f25986150ed693805f25a8812ff3c0b80

    • SHA256

      ce8cbb208c7b988987c52f8164ad366d8eba583217e1735974f2de0a0d8d601f

    • SHA512

      f53c86515e41a6cec5d6b1b1accb2282c8e41fe26126146bdd72463a8919242fb651bb20ed65e022f03f7facbdac9d9c177cee08603fdc96e7d334a8f26bd523

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks