Overview

overview

10

Static

static

10

66d357721f...c3.dll

windows7-x64

10

66d357721f...c3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66d357721f90369477b47e89fdcf252ddb507fb078d310dec950b9b585b5d4c3

  • Size

    899KB

  • Sample

    240526-hgl7esbb73

  • MD5

    af0a94174a53c8d852a9562558cdfbf4

  • SHA1

    9b32c7839c89138be6398f1e8993d59c27786570

  • SHA256

    66d357721f90369477b47e89fdcf252ddb507fb078d310dec950b9b585b5d4c3

  • SHA512

    2ae3d12188c3c0c321a25861da64bd1d286cfb5e3b645de43684238cf836e4ea2f5460afeea7f289dac6765baee8d3585dc9ee6dcfe6faf0aa7b6a10857aa4ee

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      66d357721f90369477b47e89fdcf252ddb507fb078d310dec950b9b585b5d4c3

    • Size

      899KB

    • MD5

      af0a94174a53c8d852a9562558cdfbf4

    • SHA1

      9b32c7839c89138be6398f1e8993d59c27786570

    • SHA256

      66d357721f90369477b47e89fdcf252ddb507fb078d310dec950b9b585b5d4c3

    • SHA512

      2ae3d12188c3c0c321a25861da64bd1d286cfb5e3b645de43684238cf836e4ea2f5460afeea7f289dac6765baee8d3585dc9ee6dcfe6faf0aa7b6a10857aa4ee

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks