General

  • Target

    de8073bf5f809121d86b9108029299700478561d435ac63e1f95c98a8fdd5bd6

  • Size

    899KB

  • Sample

    240909-nt3mtsyblg

  • MD5

    1f91cb125f578f08fd9e91574de2b606

  • SHA1

    01a00a35faf7d3d398e3c5018603601983f2c990

  • SHA256

    de8073bf5f809121d86b9108029299700478561d435ac63e1f95c98a8fdd5bd6

  • SHA512

    2e7098d4202a8eeb409e0290642fe3b231fd7d5bc49dbbefb39b34813aba4af1385ac954f293a61c21210b124d6f0b95c6ce93f5f29d2ce660607cbb03c03150

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXF:7wqd87VF

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      de8073bf5f809121d86b9108029299700478561d435ac63e1f95c98a8fdd5bd6

    • Size

      899KB

    • MD5

      1f91cb125f578f08fd9e91574de2b606

    • SHA1

      01a00a35faf7d3d398e3c5018603601983f2c990

    • SHA256

      de8073bf5f809121d86b9108029299700478561d435ac63e1f95c98a8fdd5bd6

    • SHA512

      2e7098d4202a8eeb409e0290642fe3b231fd7d5bc49dbbefb39b34813aba4af1385ac954f293a61c21210b124d6f0b95c6ce93f5f29d2ce660607cbb03c03150

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXF:7wqd87VF

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks