General

  • Target

    3b91c08937ed555cb1a0a0461c2be47aac72c50fb05c20b81a32c20f5adc580b

  • Size

    899KB

  • Sample

    240925-wxpt5szdkp

  • MD5

    70a59e627c99b35def7e8aabc8790e56

  • SHA1

    047e8c04e58be2d057235319ee2802458ba57641

  • SHA256

    3b91c08937ed555cb1a0a0461c2be47aac72c50fb05c20b81a32c20f5adc580b

  • SHA512

    c282e42173d3dd59a6cb8110ac0335d93391cc587c882db4de54ef7ff52a8ee4fd037fedb958170db4eb541822994fa1c331bc2aa2e00e11bf189388d84b7d89

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXV:7wqd87VV

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3b91c08937ed555cb1a0a0461c2be47aac72c50fb05c20b81a32c20f5adc580b

    • Size

      899KB

    • MD5

      70a59e627c99b35def7e8aabc8790e56

    • SHA1

      047e8c04e58be2d057235319ee2802458ba57641

    • SHA256

      3b91c08937ed555cb1a0a0461c2be47aac72c50fb05c20b81a32c20f5adc580b

    • SHA512

      c282e42173d3dd59a6cb8110ac0335d93391cc587c882db4de54ef7ff52a8ee4fd037fedb958170db4eb541822994fa1c331bc2aa2e00e11bf189388d84b7d89

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXV:7wqd87VV

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks