General

  • Target

    2950e8656ca2344e5b0550e45e38a60b06d860cb59b05554cbad19cf901c9a21

  • Size

    899KB

  • Sample

    240912-xcs7haycpd

  • MD5

    d3721beeb44cc6a0c1b2a777b78bb1b0

  • SHA1

    938aaa717fd9de4984e6616183db5ac4a4d9efd0

  • SHA256

    2950e8656ca2344e5b0550e45e38a60b06d860cb59b05554cbad19cf901c9a21

  • SHA512

    f7a8f970001ab13eecd64c242a2c45dc7023c400dca8fce509e69caa2ce98e49a4101bfbba885391970bfdd222670b7b7615135d37e68b6fa7093e285322693a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2950e8656ca2344e5b0550e45e38a60b06d860cb59b05554cbad19cf901c9a21

    • Size

      899KB

    • MD5

      d3721beeb44cc6a0c1b2a777b78bb1b0

    • SHA1

      938aaa717fd9de4984e6616183db5ac4a4d9efd0

    • SHA256

      2950e8656ca2344e5b0550e45e38a60b06d860cb59b05554cbad19cf901c9a21

    • SHA512

      f7a8f970001ab13eecd64c242a2c45dc7023c400dca8fce509e69caa2ce98e49a4101bfbba885391970bfdd222670b7b7615135d37e68b6fa7093e285322693a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks