Overview

overview

10

Static

static

10

86f0426417...ff.dll

windows7-x64

10

86f0426417...ff.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86f04264176b95d9ce687e21c936d6c8bac184a53f9d465329b7f794f56ba2ff

  • Size

    899KB

  • Sample

    240526-fehp4sfe2w

  • MD5

    47e19f50e8daa93633bcf148d6e0f618

  • SHA1

    16f19ce9daaa5e7c14f04a56adca5d867730db2c

  • SHA256

    86f04264176b95d9ce687e21c936d6c8bac184a53f9d465329b7f794f56ba2ff

  • SHA512

    8049092f575a6a8f7ccc573a900510adc6f6ed36964cc86ddbd1e78f5263184e78a28ef006e45e310709b8c71572af2fb15cd3f9b99eaf4a50276d148f4c6a78

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXp:7wqd87Vp

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      86f04264176b95d9ce687e21c936d6c8bac184a53f9d465329b7f794f56ba2ff

    • Size

      899KB

    • MD5

      47e19f50e8daa93633bcf148d6e0f618

    • SHA1

      16f19ce9daaa5e7c14f04a56adca5d867730db2c

    • SHA256

      86f04264176b95d9ce687e21c936d6c8bac184a53f9d465329b7f794f56ba2ff

    • SHA512

      8049092f575a6a8f7ccc573a900510adc6f6ed36964cc86ddbd1e78f5263184e78a28ef006e45e310709b8c71572af2fb15cd3f9b99eaf4a50276d148f4c6a78

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXp:7wqd87Vp

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks