General

  • Target

    78e74e282f1c345c863929414607942169d27a8b12ec849074e6e726ce1b81c8

  • Size

    899KB

  • Sample

    240927-fjpn8awdkm

  • MD5

    0963c699e690da23dfa3f07eac835368

  • SHA1

    244f779bfbd2603a8115dffff5c942fe5810f567

  • SHA256

    78e74e282f1c345c863929414607942169d27a8b12ec849074e6e726ce1b81c8

  • SHA512

    f3d754c744e319f25694c85e4e8947c47e0775ee51b06fcb7842df9b88c672fdcd23ce0690fb0e770a576f82211469d511f0e2e8427a6702e7f3713513533dd1

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXJ:7wqd87VJ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      78e74e282f1c345c863929414607942169d27a8b12ec849074e6e726ce1b81c8

    • Size

      899KB

    • MD5

      0963c699e690da23dfa3f07eac835368

    • SHA1

      244f779bfbd2603a8115dffff5c942fe5810f567

    • SHA256

      78e74e282f1c345c863929414607942169d27a8b12ec849074e6e726ce1b81c8

    • SHA512

      f3d754c744e319f25694c85e4e8947c47e0775ee51b06fcb7842df9b88c672fdcd23ce0690fb0e770a576f82211469d511f0e2e8427a6702e7f3713513533dd1

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXJ:7wqd87VJ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks