General

  • Target

    f281936b774cc68cf7ec86f847e0d66790c2b2dbde034898c9f3bf1da2252fe7

  • Size

    899KB

  • Sample

    240812-gfxfbsxgpk

  • MD5

    a5b4faf9ff748848c78d75af7ddc137b

  • SHA1

    ce2b478b86268d0004d8051d3dea237e1f4f7293

  • SHA256

    f281936b774cc68cf7ec86f847e0d66790c2b2dbde034898c9f3bf1da2252fe7

  • SHA512

    c80b0b96e5f442831bc5093b9f56e8c0b9a36224e20ec18539f6ce74ae4a808f0aaf67b18444760b3fca6f264107b89e1e81f38afabc48dd8156ab76c9d0c25a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXF:7wqd87VF

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f281936b774cc68cf7ec86f847e0d66790c2b2dbde034898c9f3bf1da2252fe7

    • Size

      899KB

    • MD5

      a5b4faf9ff748848c78d75af7ddc137b

    • SHA1

      ce2b478b86268d0004d8051d3dea237e1f4f7293

    • SHA256

      f281936b774cc68cf7ec86f847e0d66790c2b2dbde034898c9f3bf1da2252fe7

    • SHA512

      c80b0b96e5f442831bc5093b9f56e8c0b9a36224e20ec18539f6ce74ae4a808f0aaf67b18444760b3fca6f264107b89e1e81f38afabc48dd8156ab76c9d0c25a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXF:7wqd87VF

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks