General

  • Target

    4eea7ed365d7d5c65d69bf2043db4bc361308f56ef2efa79a40a57301343f8b4

  • Size

    899KB

  • Sample

    240909-y77ttazgka

  • MD5

    6f6e943180b2a9a149a0e9f8ff6ecab1

  • SHA1

    71b7facdbc62236afdb677e372672da6d1a65ed0

  • SHA256

    4eea7ed365d7d5c65d69bf2043db4bc361308f56ef2efa79a40a57301343f8b4

  • SHA512

    5f6248bbc1ab51236afb145c9b794da8bc6f88bec06a432ff8c374a9a990004a03bb42511e48d9333893aa1a9d6166d81805d4c365ecbcf97a7754fe8b1da29e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4eea7ed365d7d5c65d69bf2043db4bc361308f56ef2efa79a40a57301343f8b4

    • Size

      899KB

    • MD5

      6f6e943180b2a9a149a0e9f8ff6ecab1

    • SHA1

      71b7facdbc62236afdb677e372672da6d1a65ed0

    • SHA256

      4eea7ed365d7d5c65d69bf2043db4bc361308f56ef2efa79a40a57301343f8b4

    • SHA512

      5f6248bbc1ab51236afb145c9b794da8bc6f88bec06a432ff8c374a9a990004a03bb42511e48d9333893aa1a9d6166d81805d4c365ecbcf97a7754fe8b1da29e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks