Overview

overview

10

Static

static

10

220a7e6f68...1f.dll

windows7-x64

10

220a7e6f68...1f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

  • Size

    49KB

  • Sample

    240526-c52n5acg28

  • MD5

    8079d4c9468dc504276f319e207c8dfd

  • SHA1

    daf585bfc4879193fd71a1508cbfaa5d773e2a2a

  • SHA256

    220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

  • SHA512

    88480ab93d7509f92280adc7a42113cc4128f43b7e80ab670a2dcee81569034fce114657aee6a31682fb83b3c1b4daefcdd0f8495c660d384c17db0b133d4bb7

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUhgJOSJYHB9ElHS:Cn7zBjPp1H9ovoDUgJNJYHBWZS

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

    • Size

      49KB

    • MD5

      8079d4c9468dc504276f319e207c8dfd

    • SHA1

      daf585bfc4879193fd71a1508cbfaa5d773e2a2a

    • SHA256

      220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

    • SHA512

      88480ab93d7509f92280adc7a42113cc4128f43b7e80ab670a2dcee81569034fce114657aee6a31682fb83b3c1b4daefcdd0f8495c660d384c17db0b133d4bb7

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUhgJOSJYHB9ElHS:Cn7zBjPp1H9ovoDUgJNJYHBWZS

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks