Overview

overview

10

Static

static

10

2e5c25f7e4...71.dll

windows7-x64

10

2e5c25f7e4...71.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e5c25f7e46a32bc337034ab63949c59a338364ae277579ebd4b837040650071

  • Size

    50KB

  • Sample

    240526-etl6eaee6s

  • MD5

    27e8161a86c19bf0038ab4f68201511d

  • SHA1

    5888b92d757913302a7d433a00977fced494f3ba

  • SHA256

    2e5c25f7e46a32bc337034ab63949c59a338364ae277579ebd4b837040650071

  • SHA512

    a8ca45d815bb16370f307c53c83f052e9569c21fa9f73fb67c5dca59bd9d7c25942ffcb912b530f18acaedcf1c54150ae776367cc88f5a9fd80432a06a5d610a

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5rJYH:W5ReWjTrW9rNPgYoNJYH

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2e5c25f7e46a32bc337034ab63949c59a338364ae277579ebd4b837040650071

    • Size

      50KB

    • MD5

      27e8161a86c19bf0038ab4f68201511d

    • SHA1

      5888b92d757913302a7d433a00977fced494f3ba

    • SHA256

      2e5c25f7e46a32bc337034ab63949c59a338364ae277579ebd4b837040650071

    • SHA512

      a8ca45d815bb16370f307c53c83f052e9569c21fa9f73fb67c5dca59bd9d7c25942ffcb912b530f18acaedcf1c54150ae776367cc88f5a9fd80432a06a5d610a

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5rJYH:W5ReWjTrW9rNPgYoNJYH

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks