General

  • Target

    290f50e36f53653ac7ea0d030ca60849a79b29e3c993e3ff7706b9792ce53b42

  • Size

    899KB

  • Sample

    240909-1fslxs1fln

  • MD5

    a39a7501fcd9d4ee99e06028aa3f33ec

  • SHA1

    832c5cda382fa3ce8e0699d735a86e2c75b5d75a

  • SHA256

    290f50e36f53653ac7ea0d030ca60849a79b29e3c993e3ff7706b9792ce53b42

  • SHA512

    db74583d6175de7683b84004460b0c5853096c5ae23c4a65f59721bc74ef39f8eb3bac9e977eaa72eb22668e6b8e8118458f8b7d232afed8a6546f1bfd9d248f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      290f50e36f53653ac7ea0d030ca60849a79b29e3c993e3ff7706b9792ce53b42

    • Size

      899KB

    • MD5

      a39a7501fcd9d4ee99e06028aa3f33ec

    • SHA1

      832c5cda382fa3ce8e0699d735a86e2c75b5d75a

    • SHA256

      290f50e36f53653ac7ea0d030ca60849a79b29e3c993e3ff7706b9792ce53b42

    • SHA512

      db74583d6175de7683b84004460b0c5853096c5ae23c4a65f59721bc74ef39f8eb3bac9e977eaa72eb22668e6b8e8118458f8b7d232afed8a6546f1bfd9d248f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks