Overview

overview

10

Static

static

10

1d22a729cd...48.dll

windows7-x64

10

1d22a729cd...48.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d22a729cd4d76838d7fc2c476045856d2b795577490fe9a78d6937578152e48

  • Size

    899KB

  • Sample

    240525-xqhb6afa74

  • MD5

    f6cd12917ec0503dc262e2db910888b0

  • SHA1

    02912b582367876a2a33719e6abe895c36919dfb

  • SHA256

    1d22a729cd4d76838d7fc2c476045856d2b795577490fe9a78d6937578152e48

  • SHA512

    7d06cbd8fd34545e54712df7c9229a202f875597795f29dac872d96f300281e18ba8bb40749156658c49f8979c905c3929980ffa07734e6c87399bab3f777fd6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1d22a729cd4d76838d7fc2c476045856d2b795577490fe9a78d6937578152e48

    • Size

      899KB

    • MD5

      f6cd12917ec0503dc262e2db910888b0

    • SHA1

      02912b582367876a2a33719e6abe895c36919dfb

    • SHA256

      1d22a729cd4d76838d7fc2c476045856d2b795577490fe9a78d6937578152e48

    • SHA512

      7d06cbd8fd34545e54712df7c9229a202f875597795f29dac872d96f300281e18ba8bb40749156658c49f8979c905c3929980ffa07734e6c87399bab3f777fd6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks