General

  • Target

    f2701579f7979db6314626206cbeeeca8bf9cb14bbfa62b78ebf2a8fe74b5086

  • Size

    1.3MB

  • Sample

    230822-h4nnrscb5w

  • MD5

    0d3a1178b89b0abb8577d67b877c02ca

  • SHA1

    368f5b4d84af40f137e0f91761a0dc1e3111f054

  • SHA256

    f2701579f7979db6314626206cbeeeca8bf9cb14bbfa62b78ebf2a8fe74b5086

  • SHA512

    a4ab66395cf5e90b557766936a01d9c03d7e772f5c35bf01a12336566310ba4653a650266f5a8e9ff7ba9412ebfdc25cd617b9bb60d0f8e081ba2c4361614402

  • SSDEEP

    24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNC:QHPkVOBTK

Malware Config

Targets

    • Target

      f2701579f7979db6314626206cbeeeca8bf9cb14bbfa62b78ebf2a8fe74b5086

    • Size

      1.3MB

    • MD5

      0d3a1178b89b0abb8577d67b877c02ca

    • SHA1

      368f5b4d84af40f137e0f91761a0dc1e3111f054

    • SHA256

      f2701579f7979db6314626206cbeeeca8bf9cb14bbfa62b78ebf2a8fe74b5086

    • SHA512

      a4ab66395cf5e90b557766936a01d9c03d7e772f5c35bf01a12336566310ba4653a650266f5a8e9ff7ba9412ebfdc25cd617b9bb60d0f8e081ba2c4361614402

    • SSDEEP

      24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNC:QHPkVOBTK

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

MITRE ATT&CK Matrix

Tasks