Overview

overview

10

Static

static

10

61e5f1cb53...b3.dll

windows7-x64

10

61e5f1cb53...b3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61e5f1cb532bad9f7d07a9728ef27a1357d691e3e6aae06efa18f99d600116b3

  • Size

    899KB

  • Sample

    240526-h57s2aca67

  • MD5

    a9b2f7892870413df6c5a6e0ea1fbb6b

  • SHA1

    0a81d7527e4957bfc2a238f8ce50b74a6863e878

  • SHA256

    61e5f1cb532bad9f7d07a9728ef27a1357d691e3e6aae06efa18f99d600116b3

  • SHA512

    93beb5257fa7dfc0b7f6887ab913e6b587ff4f3537ab24531851dcbb8e6d660b7df3f4114ea2b38e054ee5f496c5437eed1173bbd31553a8efb4fca8436d3d4a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      61e5f1cb532bad9f7d07a9728ef27a1357d691e3e6aae06efa18f99d600116b3

    • Size

      899KB

    • MD5

      a9b2f7892870413df6c5a6e0ea1fbb6b

    • SHA1

      0a81d7527e4957bfc2a238f8ce50b74a6863e878

    • SHA256

      61e5f1cb532bad9f7d07a9728ef27a1357d691e3e6aae06efa18f99d600116b3

    • SHA512

      93beb5257fa7dfc0b7f6887ab913e6b587ff4f3537ab24531851dcbb8e6d660b7df3f4114ea2b38e054ee5f496c5437eed1173bbd31553a8efb4fca8436d3d4a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks