Ghost RAT

Malware Family

40 indicators of compromise attributed to Ghost RAT across abuse.ch threat intelligence feeds.

Domains

1

IPs

3

URLs

0

Hashes

36

Threat types

Botnet C&Cpayload

Sample indicators

kele12.vipdomain23.249.30.24ip152.136.136.244ip84.132.30.235ipaf71d8886f256bf2393b1bf6d44b2fcb50d7d546e49bb7b6fbe151a3cf2032f5hash8eae6ca0380279f0c047e6b5d49808db591f9e14d106226017eaae62b79c1a10hashc21c6962c9902ddbf4d08537ea7d96a4hash56210b7439f90f92eba1093292e3b23e6127f693hashb2930338fad806be737dd392270160dchash860ab6cd532caaa50af2c42ff4deca346a1ee009hash06ab1af35ab18f2b8e8777b397a2cd4bhash765bfb5d7829184a23f615b871baebf893563d911dddd1d1c1a34604e5456ccehash6bfcd5ae2d0c24563fe755a56b5c8bb0hash6b45cf0473f25fbb8236e6a96d999f088aa78f60hash4944dbf320a5cdbb1bb39036928930491f4b51cfhash3a6c44540d1a164f8ec0f8fb3df901f9hash7b63ddaf3b217f9e7b08575ee6f80fff1d2d9e12522d862ccc192ef3d08a0dd3hash5f283f5a5eb22bfeb153756a81728bf5d5c6ee71hash1aa9416b733743f534abea90982dcd16hash199af4936e44ed894ea45b84500a84268792dca3hashf1a04ffaa889c11b99b33610e4a87dechash4f4d405d32d76a170ca2899c70b48ef6ffaaef792e024b6f8aab98d4ae55eae4hash3c230061e5a16cc559b0a7f025f08250hashfd4bf20350133d8f8c12ed6047853571d89209dfhash