General

  • Target

    f5e81ccb23fce04503f54e18d856331bc7988163e7094519da4a1fa9a4c92296

  • Size

    899KB

  • Sample

    240902-gqj8ratdnq

  • MD5

    9c19568dc0524815347a37522a8e1486

  • SHA1

    33578579983844f0aec584cdbffea8fab9b03076

  • SHA256

    f5e81ccb23fce04503f54e18d856331bc7988163e7094519da4a1fa9a4c92296

  • SHA512

    eda92515ef270587b361db8f78a03129672f53f2216ab1d5b4c95652852a87a6e98ec07b7db73d1d35cb9a4f0760207423a4dec636ba10cfc186a4dd03021659

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f5e81ccb23fce04503f54e18d856331bc7988163e7094519da4a1fa9a4c92296

    • Size

      899KB

    • MD5

      9c19568dc0524815347a37522a8e1486

    • SHA1

      33578579983844f0aec584cdbffea8fab9b03076

    • SHA256

      f5e81ccb23fce04503f54e18d856331bc7988163e7094519da4a1fa9a4c92296

    • SHA512

      eda92515ef270587b361db8f78a03129672f53f2216ab1d5b4c95652852a87a6e98ec07b7db73d1d35cb9a4f0760207423a4dec636ba10cfc186a4dd03021659

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks