Overview

overview

10

Static

static

3

7f48fe6530...7N.exe

windows7-x64

10

7f48fe6530...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f48fe6530b8923c76b9dd60fae3fbcf29b603196a4f45de06c9f2a36965b067N

  • Size

    224KB

  • Sample

    241005-s3z1hswdkl

  • MD5

    0b715570c1016dc3a7a86475d02f8960

  • SHA1

    a274a69f4e8d0769a4919aa78796162b211bec64

  • SHA256

    7f48fe6530b8923c76b9dd60fae3fbcf29b603196a4f45de06c9f2a36965b067

  • SHA512

    c96ef686db335837dc74aab924493e8cfce7898fc1b1f4815b65f0053b70f82b70e36fd5047cf650e31b718d798d810b15fbf1db82351497d1b027c57d3da5e8

  • SSDEEP

    6144:olD94Rer6m6eLwfh+b8gm0E3GLX8RRuxW1PY:olD945oC+8t0NiExW1PY

Score
10/10
gh0stratdiscoverypersistencerat

Malware Config

Targets

    • Target

      7f48fe6530b8923c76b9dd60fae3fbcf29b603196a4f45de06c9f2a36965b067N

    • Size

      224KB

    • MD5

      0b715570c1016dc3a7a86475d02f8960

    • SHA1

      a274a69f4e8d0769a4919aa78796162b211bec64

    • SHA256

      7f48fe6530b8923c76b9dd60fae3fbcf29b603196a4f45de06c9f2a36965b067

    • SHA512

      c96ef686db335837dc74aab924493e8cfce7898fc1b1f4815b65f0053b70f82b70e36fd5047cf650e31b718d798d810b15fbf1db82351497d1b027c57d3da5e8

    • SSDEEP

      6144:olD94Rer6m6eLwfh+b8gm0E3GLX8RRuxW1PY:olD945oC+8t0NiExW1PY

    Score
    10/10
    gh0stratdiscoverypersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks