General

  • Target

    c6055bc17c9da8d36e906587d28c2874ead2b2bd1fa04c22def05f40bd8b6504

  • Size

    899KB

  • Sample

    240725-2wlc8atbqh

  • MD5

    705eb6c41d951a0dd6869903cd25473d

  • SHA1

    e6444e13e06c10af12f27afe352ba7c06f3cdc50

  • SHA256

    c6055bc17c9da8d36e906587d28c2874ead2b2bd1fa04c22def05f40bd8b6504

  • SHA512

    34ec9eef3c516e28fb4d477aa5e16a2f884bca8db407d95107c7df199c027d572132bd6d2f716ce4ef0d8ad7cc573c41330199fe7afe2878172b2f903b8b3887

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      c6055bc17c9da8d36e906587d28c2874ead2b2bd1fa04c22def05f40bd8b6504

    • Size

      899KB

    • MD5

      705eb6c41d951a0dd6869903cd25473d

    • SHA1

      e6444e13e06c10af12f27afe352ba7c06f3cdc50

    • SHA256

      c6055bc17c9da8d36e906587d28c2874ead2b2bd1fa04c22def05f40bd8b6504

    • SHA512

      34ec9eef3c516e28fb4d477aa5e16a2f884bca8db407d95107c7df199c027d572132bd6d2f716ce4ef0d8ad7cc573c41330199fe7afe2878172b2f903b8b3887

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks