General

  • Target

    a538c68ce4f274abb272200d9f665e325f42a108f7702c653a6eb59c63c995a6

  • Size

    899KB

  • Sample

    240908-btq8kswgnk

  • MD5

    741b5cd3a4466f6de90a3e0152fede04

  • SHA1

    5b0bbca943fb7f4da02175979a74bc741ec3b47c

  • SHA256

    a538c68ce4f274abb272200d9f665e325f42a108f7702c653a6eb59c63c995a6

  • SHA512

    51e8b70077dcdc4bbe6d6a9aed9423b28ba8895ed65834f2b2209e9607f7a8bb9dfbc422a8bc1d452bf4cb022b50f27c1cc3f988269f9a7d17f86a8467165f6a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a538c68ce4f274abb272200d9f665e325f42a108f7702c653a6eb59c63c995a6

    • Size

      899KB

    • MD5

      741b5cd3a4466f6de90a3e0152fede04

    • SHA1

      5b0bbca943fb7f4da02175979a74bc741ec3b47c

    • SHA256

      a538c68ce4f274abb272200d9f665e325f42a108f7702c653a6eb59c63c995a6

    • SHA512

      51e8b70077dcdc4bbe6d6a9aed9423b28ba8895ed65834f2b2209e9607f7a8bb9dfbc422a8bc1d452bf4cb022b50f27c1cc3f988269f9a7d17f86a8467165f6a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks