gh0strat | 3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365 | Triage™

Login
Reports

Overview

overview

Static

static

3b1aef23d7...65.dll

windows10-2004-x64

3

3b1aef23d7...65.dll

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365
Size 318KB
Sample260602-ldcelahy7t
SHA256 3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365
MD5 79688164eba96c3c2a0de6cbe8a8fd55
SHA1 bccbc462cd41eace9e2d08ddf0fab6823515dcf8
SHA512 03d78f903253dcfb0aa734dcbf82092140827e77492af1c216a989e04c70b3e7e62de3b40d99107cd517b13614e38aacdfac2a753d177f4caba4a429a5c13378
SSDEEP 6144:zq6MgbA94GYQ1IBOBLZI9Q9il9BTTJFyA1r:z1MT94GYQ1BDI9Q903TfyM
TLSH
T129649E11F98DC0F9FD490870649A77B68BB97C2046E8EB97D7A4DE1D1C33251B60A28F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gh0strat discovery persistence rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365.dll

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

150 seconds

discovery persistence

Malware Config

Targets

- Target
  3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365
- Size 318KB
- SHA256 3b1aef23d78ff38d1b28ed76523997ec996fb2c0d4031248a4f0f78fd513f365
- MD5 79688164eba96c3c2a0de6cbe8a8fd55
- SHA1 bccbc462cd41eace9e2d08ddf0fab6823515dcf8
- SHA512 03d78f903253dcfb0aa734dcbf82092140827e77492af1c216a989e04c70b3e7e62de3b40d99107cd517b13614e38aacdfac2a753d177f4caba4a429a5c13378
- SSDEEP 6144:zq6MgbA94GYQ1IBOBLZI9Q9il9BTTJFyA1r:z1MT94GYQ1BDI9Q903TfyM
- TLSH
  T129649E11F98DC0F9FD490870649A77B68BB97C2046E8EB97D7A4DE1D1C33251B60A28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence

© 2018-2026

Terms | Privacy