General

  • Target

    001e7e244514bc9cf0f68792722a0f816ba7b4e33583599899188f1758a70f6e

  • Size

    899KB

  • Sample

    240925-f42jhsxekk

  • MD5

    b552f28efdc9cb750007e52cef1764b5

  • SHA1

    3addb9f2cedc68b40a649b283a06f88b87949add

  • SHA256

    001e7e244514bc9cf0f68792722a0f816ba7b4e33583599899188f1758a70f6e

  • SHA512

    d322e63b5e71dcb0d3a1783b8e705f05c48b38138283858e3c1e810229286999ac1d219315c11e6e64db1d991d01d093b533cb525291dfa9a588f3c08ca16286

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      001e7e244514bc9cf0f68792722a0f816ba7b4e33583599899188f1758a70f6e

    • Size

      899KB

    • MD5

      b552f28efdc9cb750007e52cef1764b5

    • SHA1

      3addb9f2cedc68b40a649b283a06f88b87949add

    • SHA256

      001e7e244514bc9cf0f68792722a0f816ba7b4e33583599899188f1758a70f6e

    • SHA512

      d322e63b5e71dcb0d3a1783b8e705f05c48b38138283858e3c1e810229286999ac1d219315c11e6e64db1d991d01d093b533cb525291dfa9a588f3c08ca16286

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks