General

  • Target

    ba7ac5ee2db7905d2711787075398daefe4e24fe3bbff4e03378acffd938b9ad

  • Size

    899KB

  • Sample

    240925-28y5vatbkk

  • MD5

    671bd08f2fd26f68d2a0d49462e90caa

  • SHA1

    ad3716d8b50436a415694bb2769d7aa36eb7fbf0

  • SHA256

    ba7ac5ee2db7905d2711787075398daefe4e24fe3bbff4e03378acffd938b9ad

  • SHA512

    ffebb0c675b4b92ca6bd0237464dd398bb6543e4f3a5659ccfd737496fceab36765ad22cd1bf24841eb82e357407d35222806609ad8ec46bff535bfe0033d469

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ba7ac5ee2db7905d2711787075398daefe4e24fe3bbff4e03378acffd938b9ad

    • Size

      899KB

    • MD5

      671bd08f2fd26f68d2a0d49462e90caa

    • SHA1

      ad3716d8b50436a415694bb2769d7aa36eb7fbf0

    • SHA256

      ba7ac5ee2db7905d2711787075398daefe4e24fe3bbff4e03378acffd938b9ad

    • SHA512

      ffebb0c675b4b92ca6bd0237464dd398bb6543e4f3a5659ccfd737496fceab36765ad22cd1bf24841eb82e357407d35222806609ad8ec46bff535bfe0033d469

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks