Overview

overview

10

Static

static

10

9610f1606a...07.dll

windows7-x64

10

9610f1606a...07.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9610f1606a6da14958ea03252283629f985283caf88717c95f442b71a86d4407

  • Size

    51KB

  • Sample

    240523-j7eqpsae8s

  • MD5

    9180b4b978b74eb7d41f906bb721b968

  • SHA1

    e57b964de4388aaee8159766c0a6db63938c9f92

  • SHA256

    9610f1606a6da14958ea03252283629f985283caf88717c95f442b71a86d4407

  • SHA512

    7160c6f1d70b4a6a0fcb4e06fb2d86e7ab554616913d9f9af9fe466df5ffaaed09b22a02309b33d9583ba5dd0a30f3bef9840b30116844fea9e57d499084e0ee

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL4JYH5:1dWubF3n9S91BF3fbosJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9610f1606a6da14958ea03252283629f985283caf88717c95f442b71a86d4407

    • Size

      51KB

    • MD5

      9180b4b978b74eb7d41f906bb721b968

    • SHA1

      e57b964de4388aaee8159766c0a6db63938c9f92

    • SHA256

      9610f1606a6da14958ea03252283629f985283caf88717c95f442b71a86d4407

    • SHA512

      7160c6f1d70b4a6a0fcb4e06fb2d86e7ab554616913d9f9af9fe466df5ffaaed09b22a02309b33d9583ba5dd0a30f3bef9840b30116844fea9e57d499084e0ee

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL4JYH5:1dWubF3n9S91BF3fbosJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks