Overview

overview

10

Static

static

10

a2058f26f4...34.dll

windows7-x64

10

a2058f26f4...34.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2058f26f478f847f7e6b06a2cf929aa5ff9cc52dd7a886db154a34125323134

  • Size

    91KB

  • Sample

    241012-bf6fcaycqp

  • MD5

    2f3d0672b53e6d3b11527357ba8dddba

  • SHA1

    9c003d51c76d0efc0586744d26b5e1ee3b6cd865

  • SHA256

    a2058f26f478f847f7e6b06a2cf929aa5ff9cc52dd7a886db154a34125323134

  • SHA512

    b02a7b832432a9f1c0790df9d07f9a4426382d5176bef9bb96057faa78af18fadde4564af4175f89bf8f7c9712e1a10b5f4c01c79cba858025866976049db1e5

  • SSDEEP

    1536:yx7dREk3ljSVQy13eDBO8A7K7cdDQfMfGj7LdYwTUrcd:yx7dREk3lKODBMK7ODqMfGj7LdY04cd

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      a2058f26f478f847f7e6b06a2cf929aa5ff9cc52dd7a886db154a34125323134

    • Size

      91KB

    • MD5

      2f3d0672b53e6d3b11527357ba8dddba

    • SHA1

      9c003d51c76d0efc0586744d26b5e1ee3b6cd865

    • SHA256

      a2058f26f478f847f7e6b06a2cf929aa5ff9cc52dd7a886db154a34125323134

    • SHA512

      b02a7b832432a9f1c0790df9d07f9a4426382d5176bef9bb96057faa78af18fadde4564af4175f89bf8f7c9712e1a10b5f4c01c79cba858025866976049db1e5

    • SSDEEP

      1536:yx7dREk3ljSVQy13eDBO8A7K7cdDQfMfGj7LdYwTUrcd:yx7dREk3lKODBMK7ODqMfGj7LdY04cd

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks