Overview

overview

10

Static

static

10

54f7700d18...8f.dll

windows7-x64

10

54f7700d18...8f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54f7700d1864b811066cbe94f1b55a6a3f39901c73cfeb0deb912d17e173128f

  • Size

    899KB

  • Sample

    240523-vzl1laae24

  • MD5

    e8a7ff08102f318a5a703a8664f361f1

  • SHA1

    63cae8810a09c49f960a55614ace5ef012a406b3

  • SHA256

    54f7700d1864b811066cbe94f1b55a6a3f39901c73cfeb0deb912d17e173128f

  • SHA512

    3af6ea9dd41630bf5d2bb5afad9e12c9b8eab225777826407fe50e07524b966d94b69b70cbb3f0ca8f91f34c5138764e2d38b84863f505fd72c3483511518b5a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      54f7700d1864b811066cbe94f1b55a6a3f39901c73cfeb0deb912d17e173128f

    • Size

      899KB

    • MD5

      e8a7ff08102f318a5a703a8664f361f1

    • SHA1

      63cae8810a09c49f960a55614ace5ef012a406b3

    • SHA256

      54f7700d1864b811066cbe94f1b55a6a3f39901c73cfeb0deb912d17e173128f

    • SHA512

      3af6ea9dd41630bf5d2bb5afad9e12c9b8eab225777826407fe50e07524b966d94b69b70cbb3f0ca8f91f34c5138764e2d38b84863f505fd72c3483511518b5a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks