General

  • Target

    b7ff0d24e8d56942b19ee68d3f78e3a796126e8f27de39b637b698907a272ced

  • Size

    899KB

  • Sample

    240914-aq3lrsxgqe

  • MD5

    db98798f1a401a8491d64a4dd6f71e67

  • SHA1

    a90afc911390e6c457e0a0e6bf17c031f0916732

  • SHA256

    b7ff0d24e8d56942b19ee68d3f78e3a796126e8f27de39b637b698907a272ced

  • SHA512

    6804f3fa9ee2f415888bed648d8f82428fbe015b7fd464a01254ff1aba573ea2595ab2d1d260957d3fe92fc21787382853d7028261d705c96f2e43bd4241bfec

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b7ff0d24e8d56942b19ee68d3f78e3a796126e8f27de39b637b698907a272ced

    • Size

      899KB

    • MD5

      db98798f1a401a8491d64a4dd6f71e67

    • SHA1

      a90afc911390e6c457e0a0e6bf17c031f0916732

    • SHA256

      b7ff0d24e8d56942b19ee68d3f78e3a796126e8f27de39b637b698907a272ced

    • SHA512

      6804f3fa9ee2f415888bed648d8f82428fbe015b7fd464a01254ff1aba573ea2595ab2d1d260957d3fe92fc21787382853d7028261d705c96f2e43bd4241bfec

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks