General

  • Target

    93801a6499a59d08e68461eee1e1fed93d8f8ef22e33404cff8c3968bb84b9cd

  • Size

    899KB

  • Sample

    240726-vlthhs1dqj

  • MD5

    a4fb9571984cfd5dd09cea0d478d8189

  • SHA1

    1ec126fdbf94a8ecdf115bae6df6a9af3e4c572c

  • SHA256

    93801a6499a59d08e68461eee1e1fed93d8f8ef22e33404cff8c3968bb84b9cd

  • SHA512

    067e645297e8ca926bc4f4b9ec09730090d12cd4c083edb0db680083fa75f1ac691c85077054f76e19a0bb31d67508a4523c94759845b060151d7a0815047174

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      93801a6499a59d08e68461eee1e1fed93d8f8ef22e33404cff8c3968bb84b9cd

    • Size

      899KB

    • MD5

      a4fb9571984cfd5dd09cea0d478d8189

    • SHA1

      1ec126fdbf94a8ecdf115bae6df6a9af3e4c572c

    • SHA256

      93801a6499a59d08e68461eee1e1fed93d8f8ef22e33404cff8c3968bb84b9cd

    • SHA512

      067e645297e8ca926bc4f4b9ec09730090d12cd4c083edb0db680083fa75f1ac691c85077054f76e19a0bb31d67508a4523c94759845b060151d7a0815047174

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks