Overview

overview

10

Static

static

3

340d9a7c47...68.exe

windows7-x64

10

340d9a7c47...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    340d9a7c47f97b892adf7fbcdcfde158d492dbaec728f4008106603fa445dc68

  • Size

    1.6MB

  • Sample

    250109-pe4f9azje1

  • MD5

    4797f5ea7e0b17cfecdb71d276436b11

  • SHA1

    7585109ca1f8ecf34403d8a139190528a029a6a6

  • SHA256

    340d9a7c47f97b892adf7fbcdcfde158d492dbaec728f4008106603fa445dc68

  • SHA512

    67bc6b4219d37ae29e983b5eb85207ba247e2632cbcfec2c9b71d62189360546b166daa6adb3b0ccfb699841a59e8b15758fae7ee56938ccb05b8ad67068ce79

  • SSDEEP

    24576:01FOeh7E7IJbtEJEHng8wGrQTLq73xaH7pbH0JZo4HwJ+q:01FOWFJbtSMXoTLq73xKYJZ7w+q

Score
10/10
gh0stratpurplefoxdiscoveryratrootkittrojan

Malware Config

Targets

    • Target

      340d9a7c47f97b892adf7fbcdcfde158d492dbaec728f4008106603fa445dc68

    • Size

      1.6MB

    • MD5

      4797f5ea7e0b17cfecdb71d276436b11

    • SHA1

      7585109ca1f8ecf34403d8a139190528a029a6a6

    • SHA256

      340d9a7c47f97b892adf7fbcdcfde158d492dbaec728f4008106603fa445dc68

    • SHA512

      67bc6b4219d37ae29e983b5eb85207ba247e2632cbcfec2c9b71d62189360546b166daa6adb3b0ccfb699841a59e8b15758fae7ee56938ccb05b8ad67068ce79

    • SSDEEP

      24576:01FOeh7E7IJbtEJEHng8wGrQTLq73xaH7pbH0JZo4HwJ+q:01FOWFJbtSMXoTLq73xKYJZ7w+q

    Score
    10/10
    gh0stratpurplefoxdiscoveryratrootkittrojan

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

      rootkit

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

      rootkittrojanpurplefox

    • Purplefox family

      purplefox
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks