Overview

overview

10

Static

static

10

9dce5b4188...f8.dll

windows7-x64

10

9dce5b4188...f8.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9dce5b418855b0f9fcc866827589c59016ac400da68a843d5d93d001f46cf9f8

  • Size

    51KB

  • Sample

    240523-vysrraad31

  • MD5

    10380cbe342f20e752e52816668446af

  • SHA1

    4b24b2baad22cd9f0b1a30ebf4b46942f7568d6e

  • SHA256

    9dce5b418855b0f9fcc866827589c59016ac400da68a843d5d93d001f46cf9f8

  • SHA512

    e9452a932a76b94f97e985d690728ba9b9b8e7750841b247fb503b8a508f45b37a2069f558d5ad186243ebb6b5a83411934b5d864398c404db7cd5d27f54bfff

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+xJYH5:1dWubF3n9S91BF3fboGJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9dce5b418855b0f9fcc866827589c59016ac400da68a843d5d93d001f46cf9f8

    • Size

      51KB

    • MD5

      10380cbe342f20e752e52816668446af

    • SHA1

      4b24b2baad22cd9f0b1a30ebf4b46942f7568d6e

    • SHA256

      9dce5b418855b0f9fcc866827589c59016ac400da68a843d5d93d001f46cf9f8

    • SHA512

      e9452a932a76b94f97e985d690728ba9b9b8e7750841b247fb503b8a508f45b37a2069f558d5ad186243ebb6b5a83411934b5d864398c404db7cd5d27f54bfff

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+xJYH5:1dWubF3n9S91BF3fboGJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks