Overview

overview

10

Static

static

10

7f6a4af657...5b.dll

windows7-x64

10

7f6a4af657...5b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f6a4af65776061b4d7d54c968d8e73e33a66ff4e88349f2cd110adbc396c75b

  • Size

    899KB

  • Sample

    240525-w37bdade3w

  • MD5

    7516a0abd39347d57b2db359b28c2b18

  • SHA1

    a278ff3c783801d36767fdb1d33ee1a5317642ac

  • SHA256

    7f6a4af65776061b4d7d54c968d8e73e33a66ff4e88349f2cd110adbc396c75b

  • SHA512

    e6b26fe2aada79d6d5501cfeb71d0ac940af20472792b17585bdc8f0890078601dec05ddcfc8b85e2980629abe306d1e3246bd8f7304de618f84e2d010b6ae1f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

12123das.f3322.net

Targets

    • Target

      7f6a4af65776061b4d7d54c968d8e73e33a66ff4e88349f2cd110adbc396c75b

    • Size

      899KB

    • MD5

      7516a0abd39347d57b2db359b28c2b18

    • SHA1

      a278ff3c783801d36767fdb1d33ee1a5317642ac

    • SHA256

      7f6a4af65776061b4d7d54c968d8e73e33a66ff4e88349f2cd110adbc396c75b

    • SHA512

      e6b26fe2aada79d6d5501cfeb71d0ac940af20472792b17585bdc8f0890078601dec05ddcfc8b85e2980629abe306d1e3246bd8f7304de618f84e2d010b6ae1f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks