Overview

overview

10

Static

static

10

d667346d9f...3b.dll

windows7-x64

10

d667346d9f...3b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d667346d9f9a8eb34ca58b28e597247ad0b934d32fb9e33d239cdc0c95f2373b

  • Size

    51KB

  • Sample

    240526-e7y25afh55

  • MD5

    d067324a52e666c3dcb94a1be643b6ab

  • SHA1

    b69cbb2693364bc7e1205f6810a6508ceb22577e

  • SHA256

    d667346d9f9a8eb34ca58b28e597247ad0b934d32fb9e33d239cdc0c95f2373b

  • SHA512

    21b3f2e62865164233424769f42c108092df0f553b86021a7392d1d0963212ac2b468bf4f4b5219f595a828d1e65377b869aa515e58769fa953eb03e057ec13f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frCoLHJYH5:1dWubF3n9S91BF3fGojJYH5

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      d667346d9f9a8eb34ca58b28e597247ad0b934d32fb9e33d239cdc0c95f2373b

    • Size

      51KB

    • MD5

      d067324a52e666c3dcb94a1be643b6ab

    • SHA1

      b69cbb2693364bc7e1205f6810a6508ceb22577e

    • SHA256

      d667346d9f9a8eb34ca58b28e597247ad0b934d32fb9e33d239cdc0c95f2373b

    • SHA512

      21b3f2e62865164233424769f42c108092df0f553b86021a7392d1d0963212ac2b468bf4f4b5219f595a828d1e65377b869aa515e58769fa953eb03e057ec13f

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frCoLHJYH5:1dWubF3n9S91BF3fGojJYH5

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks