Overview

overview

10

Static

static

10

1af1ea1516...77.dll

windows7-x64

10

1af1ea1516...77.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1af1ea15160612d43341f95b69431a4887da252199f5b664f6a3b1149a23e477

  • Size

    899KB

  • Sample

    240525-vt25mabf5s

  • MD5

    f8060ef975f3f79125311efa0ddeab19

  • SHA1

    d18d10c32244c91232ded080694c2ab7107580a4

  • SHA256

    1af1ea15160612d43341f95b69431a4887da252199f5b664f6a3b1149a23e477

  • SHA512

    9ab045b9a5f89b7cd0f041bfe3cc0b81758e8eda4e235c495ffa50dae44087009f9568e3394d01e752c3cce995e5b75fc71e9f87b852b7f033692701233ca202

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1af1ea15160612d43341f95b69431a4887da252199f5b664f6a3b1149a23e477

    • Size

      899KB

    • MD5

      f8060ef975f3f79125311efa0ddeab19

    • SHA1

      d18d10c32244c91232ded080694c2ab7107580a4

    • SHA256

      1af1ea15160612d43341f95b69431a4887da252199f5b664f6a3b1149a23e477

    • SHA512

      9ab045b9a5f89b7cd0f041bfe3cc0b81758e8eda4e235c495ffa50dae44087009f9568e3394d01e752c3cce995e5b75fc71e9f87b852b7f033692701233ca202

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks