Overview

overview

10

Static

static

10

615796b35d...52.dll

windows7-x64

10

615796b35d...52.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    615796b35dac00b27dbfae9d5e97565905469a10acd85ad75eabf9f3cb3e1852

  • Size

    51KB

  • Sample

    240525-wqcw1ach3t

  • MD5

    dabc94fee9e292f4d2e4abf4b5a5b57d

  • SHA1

    8e1b70f7d8fac2181b3e517a1eec01ea5c5a52b2

  • SHA256

    615796b35dac00b27dbfae9d5e97565905469a10acd85ad75eabf9f3cb3e1852

  • SHA512

    0f5d3c10cff1601b8073da2ca9805648c1355e4df74161af1358da402d2a02f4d8b17c33cf4916397c61eaa0f6331f0428ee31e23a47d06f1920289f0959e5b1

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fbokJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      615796b35dac00b27dbfae9d5e97565905469a10acd85ad75eabf9f3cb3e1852

    • Size

      51KB

    • MD5

      dabc94fee9e292f4d2e4abf4b5a5b57d

    • SHA1

      8e1b70f7d8fac2181b3e517a1eec01ea5c5a52b2

    • SHA256

      615796b35dac00b27dbfae9d5e97565905469a10acd85ad75eabf9f3cb3e1852

    • SHA512

      0f5d3c10cff1601b8073da2ca9805648c1355e4df74161af1358da402d2a02f4d8b17c33cf4916397c61eaa0f6331f0428ee31e23a47d06f1920289f0959e5b1

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fbokJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks