Overview

overview

10

Static

static

10

929fb120f8...9f.dll

windows7-x64

10

929fb120f8...9f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    929fb120f887815e02d819f3d75c8c65ff4eef8e58720f454345bc67a990ad9f

  • Size

    899KB

  • Sample

    240523-v1k5paad9t

  • MD5

    b32b07c09b238b15577a4cbf82050292

  • SHA1

    ec932e8d837f75f22c4d19e36d4abb11c2c60cd2

  • SHA256

    929fb120f887815e02d819f3d75c8c65ff4eef8e58720f454345bc67a990ad9f

  • SHA512

    17e7ead8a7eff0f2747969ee029d18020ca5d8a4afccd1d80486dc9b4e1a6745e44b2a3aafa5a3d8d5378d43f70f9a1cb172176b9bcfae27b2e6cc889e5f85fd

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      929fb120f887815e02d819f3d75c8c65ff4eef8e58720f454345bc67a990ad9f

    • Size

      899KB

    • MD5

      b32b07c09b238b15577a4cbf82050292

    • SHA1

      ec932e8d837f75f22c4d19e36d4abb11c2c60cd2

    • SHA256

      929fb120f887815e02d819f3d75c8c65ff4eef8e58720f454345bc67a990ad9f

    • SHA512

      17e7ead8a7eff0f2747969ee029d18020ca5d8a4afccd1d80486dc9b4e1a6745e44b2a3aafa5a3d8d5378d43f70f9a1cb172176b9bcfae27b2e6cc889e5f85fd

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks