Overview

overview

10

Static

static

10

0cd9ea5687...6e.dll

windows7-x64

10

0cd9ea5687...6e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cd9ea5687e6f32ad7b68746e326922774bf34a7d22f40641cea176049e2da6e

  • Size

    899KB

  • Sample

    240525-xmy6haee3z

  • MD5

    24fbf28b8e477bb12c3d0d45775555e5

  • SHA1

    7ee8caa467c26f05cb19bc60b4fe9444c5d77187

  • SHA256

    0cd9ea5687e6f32ad7b68746e326922774bf34a7d22f40641cea176049e2da6e

  • SHA512

    8fe731f89437f251296ee2d8fd5265cf2bc429f0cc101c43765149672e5375eabc812ac9d31f969a76e95db54e08b01bf62bf5a7b663121805138a59f3b15b84

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      0cd9ea5687e6f32ad7b68746e326922774bf34a7d22f40641cea176049e2da6e

    • Size

      899KB

    • MD5

      24fbf28b8e477bb12c3d0d45775555e5

    • SHA1

      7ee8caa467c26f05cb19bc60b4fe9444c5d77187

    • SHA256

      0cd9ea5687e6f32ad7b68746e326922774bf34a7d22f40641cea176049e2da6e

    • SHA512

      8fe731f89437f251296ee2d8fd5265cf2bc429f0cc101c43765149672e5375eabc812ac9d31f969a76e95db54e08b01bf62bf5a7b663121805138a59f3b15b84

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks