Overview

overview

10

Static

static

10

747295b4bf...6b.dll

windows7-x64

10

747295b4bf...6b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    747295b4bff0a978290c20a64afd6449732fb20284802cc1d0a50095620ed86b

  • Size

    50KB

  • Sample

    240526-eehvfaef42

  • MD5

    8ca6d969fa4530cf5019f83b05de8781

  • SHA1

    1e202eddb86ae467d06e62b3e2dd293ff8e25267

  • SHA256

    747295b4bff0a978290c20a64afd6449732fb20284802cc1d0a50095620ed86b

  • SHA512

    4846e063dbdd6d28679c0de560f0da1c2846f27411e3ebafec40b7884b4982519d9a7881ed494b0a09ed3ea65d060b69f5704966e084c9f2842015df5c8fb332

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5vJYH:W5ReWjTrW9rNPgYoNJYH

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      747295b4bff0a978290c20a64afd6449732fb20284802cc1d0a50095620ed86b

    • Size

      50KB

    • MD5

      8ca6d969fa4530cf5019f83b05de8781

    • SHA1

      1e202eddb86ae467d06e62b3e2dd293ff8e25267

    • SHA256

      747295b4bff0a978290c20a64afd6449732fb20284802cc1d0a50095620ed86b

    • SHA512

      4846e063dbdd6d28679c0de560f0da1c2846f27411e3ebafec40b7884b4982519d9a7881ed494b0a09ed3ea65d060b69f5704966e084c9f2842015df5c8fb332

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5vJYH:W5ReWjTrW9rNPgYoNJYH

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks