Overview

overview

10

Static

static

10

3a86ddee55...98.dll

windows7-x64

10

3a86ddee55...98.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a86ddee55b28ce7608ffcc8b9700ece5670428383d192b31acfb44584d2d698

  • Size

    899KB

  • Sample

    240525-zb8lxahd8y

  • MD5

    e20c3ea55da82e224bc06edb27217501

  • SHA1

    cf0f36cc15685db216e18953cec48f4152e8411c

  • SHA256

    3a86ddee55b28ce7608ffcc8b9700ece5670428383d192b31acfb44584d2d698

  • SHA512

    cb321aa9b17d39129e2ad47502ddcb5c9fff4bcbd8af6520ea12d35382d39c317d1b102898481e63284fc9aa0849d5de24df98493568b88826876e9f5423cd78

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3a86ddee55b28ce7608ffcc8b9700ece5670428383d192b31acfb44584d2d698

    • Size

      899KB

    • MD5

      e20c3ea55da82e224bc06edb27217501

    • SHA1

      cf0f36cc15685db216e18953cec48f4152e8411c

    • SHA256

      3a86ddee55b28ce7608ffcc8b9700ece5670428383d192b31acfb44584d2d698

    • SHA512

      cb321aa9b17d39129e2ad47502ddcb5c9fff4bcbd8af6520ea12d35382d39c317d1b102898481e63284fc9aa0849d5de24df98493568b88826876e9f5423cd78

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks