Overview

overview

10

Static

static

10

3c746f1185...f0.dll

windows7-x64

10

3c746f1185...f0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c746f11858ba690ca4c1d85cb0a8f0df95a57bc18de6927f5e376615b0261f0

  • Size

    51KB

  • Sample

    240523-g2rf7sgb32

  • MD5

    6665995705f1b16b1ed06f3a9e2c09f8

  • SHA1

    1dc80f03b27fefd0b12eea05b798143b0d60f90e

  • SHA256

    3c746f11858ba690ca4c1d85cb0a8f0df95a57bc18de6927f5e376615b0261f0

  • SHA512

    868a0aba29ec99b7ea1bc63665bb92fc28125315faaafa027f52da5c69147b80783d21f9b3bfbab29194af2aed93298b611f94c2c88e9caf88d747013269a335

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbowJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3c746f11858ba690ca4c1d85cb0a8f0df95a57bc18de6927f5e376615b0261f0

    • Size

      51KB

    • MD5

      6665995705f1b16b1ed06f3a9e2c09f8

    • SHA1

      1dc80f03b27fefd0b12eea05b798143b0d60f90e

    • SHA256

      3c746f11858ba690ca4c1d85cb0a8f0df95a57bc18de6927f5e376615b0261f0

    • SHA512

      868a0aba29ec99b7ea1bc63665bb92fc28125315faaafa027f52da5c69147b80783d21f9b3bfbab29194af2aed93298b611f94c2c88e9caf88d747013269a335

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbowJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks