Overview

overview

10

Static

static

10

67c42f2319...be.dll

windows7-x64

10

67c42f2319...be.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67c42f2319cd41687386b246c450f548349e85c00c36b41eef37aa5f98e3efbe

  • Size

    899KB

  • Sample

    240526-d4rcfaeb34

  • MD5

    feecc4ed5ba33cb4a6d7a57a79e45d11

  • SHA1

    c005f0dd140c37d17cbce6320b84c69a48cea7a7

  • SHA256

    67c42f2319cd41687386b246c450f548349e85c00c36b41eef37aa5f98e3efbe

  • SHA512

    bf5b076ddc2827a86892ac8394c7850145b3d1ba143a09e4bda61e236b8da779c2bbe9c692237325c79b72aa11fd2302dd0636604b38b7eac617173889fb4c78

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXp:7wqd87Vp

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      67c42f2319cd41687386b246c450f548349e85c00c36b41eef37aa5f98e3efbe

    • Size

      899KB

    • MD5

      feecc4ed5ba33cb4a6d7a57a79e45d11

    • SHA1

      c005f0dd140c37d17cbce6320b84c69a48cea7a7

    • SHA256

      67c42f2319cd41687386b246c450f548349e85c00c36b41eef37aa5f98e3efbe

    • SHA512

      bf5b076ddc2827a86892ac8394c7850145b3d1ba143a09e4bda61e236b8da779c2bbe9c692237325c79b72aa11fd2302dd0636604b38b7eac617173889fb4c78

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXp:7wqd87Vp

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks