Overview

overview

10

Static

static

10

6919bec7ec...3d.dll

windows7-x64

10

6919bec7ec...3d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

  • Size

    51KB

  • Sample

    240525-x4rgzsfg29

  • MD5

    078cc666bed4ace4c4dfb2729f4a89fb

  • SHA1

    ba17335ce75be071c8b38c3058a1154634fa0899

  • SHA256

    6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

  • SHA512

    6db22c9944aa9f8ff76bbf3e4a5ff0217cc4e5062b4a01a151c8b595483659205ad69b89f8d488e80a2a387e1b6db35f59fbbb3898d6a00f6569d67ee8f6247e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frxroL4JYH5:1dWubF3n9S91BF3fNro8JYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

    • Size

      51KB

    • MD5

      078cc666bed4ace4c4dfb2729f4a89fb

    • SHA1

      ba17335ce75be071c8b38c3058a1154634fa0899

    • SHA256

      6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

    • SHA512

      6db22c9944aa9f8ff76bbf3e4a5ff0217cc4e5062b4a01a151c8b595483659205ad69b89f8d488e80a2a387e1b6db35f59fbbb3898d6a00f6569d67ee8f6247e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frxroL4JYH5:1dWubF3n9S91BF3fNro8JYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks