Overview

overview

10

Static

static

10

131612b9fb...0a.dll

windows7-x64

10

131612b9fb...0a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    131612b9fb0b9f16cf0a29d08ce822320212b0fc6bbb61273b84659837ab820a

  • Size

    899KB

  • Sample

    240611-w5nxtawhqp

  • MD5

    e9d92294152f225906f1d37b9c5c2fb7

  • SHA1

    84771fa407e19b242118ab3e77ae4a0b80cede28

  • SHA256

    131612b9fb0b9f16cf0a29d08ce822320212b0fc6bbb61273b84659837ab820a

  • SHA512

    4b7d035016d253f1b4f000d80be3df592d9518a6dc05cbbf2148c775f3c0a2f3af3d4727cfb24aaa73d00a2346f28abb74fb9006acac7f781ff796bf9a06bf26

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10
gh0stratrat

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      131612b9fb0b9f16cf0a29d08ce822320212b0fc6bbb61273b84659837ab820a

    • Size

      899KB

    • MD5

      e9d92294152f225906f1d37b9c5c2fb7

    • SHA1

      84771fa407e19b242118ab3e77ae4a0b80cede28

    • SHA256

      131612b9fb0b9f16cf0a29d08ce822320212b0fc6bbb61273b84659837ab820a

    • SHA512

      4b7d035016d253f1b4f000d80be3df592d9518a6dc05cbbf2148c775f3c0a2f3af3d4727cfb24aaa73d00a2346f28abb74fb9006acac7f781ff796bf9a06bf26

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks