Overview

overview

10

Static

static

10

aada59a86a...ad.dll

windows7-x64

10

aada59a86a...ad.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aada59a86a81e26957579b326d51eae8689093f3cc5a6b6acf813f0b744314ad

  • Size

    899KB

  • Sample

    240525-ybkz6sgb33

  • MD5

    e6eedcf54635a11a6560a9424a4eca64

  • SHA1

    8649c5127fca098ce7db638847467c6409394777

  • SHA256

    aada59a86a81e26957579b326d51eae8689093f3cc5a6b6acf813f0b744314ad

  • SHA512

    ad068c6c184c6f6ac47a5ec3a72b11a99823eca9020ddea7506d388fbb9f4ac9a58938539c51506d1c9c7846901a2b1a5ff84cdffa44230586d34e60d086aeea

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      aada59a86a81e26957579b326d51eae8689093f3cc5a6b6acf813f0b744314ad

    • Size

      899KB

    • MD5

      e6eedcf54635a11a6560a9424a4eca64

    • SHA1

      8649c5127fca098ce7db638847467c6409394777

    • SHA256

      aada59a86a81e26957579b326d51eae8689093f3cc5a6b6acf813f0b744314ad

    • SHA512

      ad068c6c184c6f6ac47a5ec3a72b11a99823eca9020ddea7506d388fbb9f4ac9a58938539c51506d1c9c7846901a2b1a5ff84cdffa44230586d34e60d086aeea

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks