Overview

overview

10

Static

static

3

4c7bd7c0a6...c7.exe

windows7-x64

10

4c7bd7c0a6...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c7bd7c0a62e223b1d1c47971bcf12cd4598fb8e528d47ca123a0a517af612c7

  • Size

    1.3MB

  • Sample

    241229-t7dhravket

  • MD5

    edf881a8de95726a5964c8c3cae391ce

  • SHA1

    eaa6e5c752911b1872ace1648208662448287773

  • SHA256

    4c7bd7c0a62e223b1d1c47971bcf12cd4598fb8e528d47ca123a0a517af612c7

  • SHA512

    b57d1f1f8cf1f5de763ddfdf19663962c94322877899dd46bc3018048e5899d723131bb5d87ee5a9023ba73c1830ee17303c84b81704ede47cf6dd5ea2f38b10

  • SSDEEP

    24576:OerZMzewVpLSs57OmR07qKz8GDxZnnnnnnnnnnnnnnnnnnnnnnnnWnnnnnnnnnnR:bM7pLzfzKoG3nnnnnnnnnnnnnnnnnnni

Score
10/10
gh0stratpurplefoxdiscoveryratrootkittrojan

Malware Config

Targets

    • Target

      4c7bd7c0a62e223b1d1c47971bcf12cd4598fb8e528d47ca123a0a517af612c7

    • Size

      1.3MB

    • MD5

      edf881a8de95726a5964c8c3cae391ce

    • SHA1

      eaa6e5c752911b1872ace1648208662448287773

    • SHA256

      4c7bd7c0a62e223b1d1c47971bcf12cd4598fb8e528d47ca123a0a517af612c7

    • SHA512

      b57d1f1f8cf1f5de763ddfdf19663962c94322877899dd46bc3018048e5899d723131bb5d87ee5a9023ba73c1830ee17303c84b81704ede47cf6dd5ea2f38b10

    • SSDEEP

      24576:OerZMzewVpLSs57OmR07qKz8GDxZnnnnnnnnnnnnnnnnnnnnnnnnWnnnnnnnnnnR:bM7pLzfzKoG3nnnnnnnnnnnnnnnnnnni

    Score
    10/10
    gh0stratpurplefoxdiscoveryratrootkittrojan

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

      rootkit

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

      rootkittrojanpurplefox

    • Purplefox family

      purplefox
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks