General

  • Target

    2f6352037ef047ccb691eb11eea341438a268b5ae95c51368faca811931350b5

  • Size

    899KB

  • Sample

    241012-bjc8zathle

  • MD5

    b21b6258486199552aef6db3353be9c4

  • SHA1

    9842789f836e59036f176d67aff61a077f9a032d

  • SHA256

    2f6352037ef047ccb691eb11eea341438a268b5ae95c51368faca811931350b5

  • SHA512

    b707a1e0c815f46a78c95d76896d51658fb111431c3e2cec2714f6aee40677f7c7180e7571b27ce7aecf046255a4b08a73d39b69348781bd8d57c352976e06c2

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2f6352037ef047ccb691eb11eea341438a268b5ae95c51368faca811931350b5

    • Size

      899KB

    • MD5

      b21b6258486199552aef6db3353be9c4

    • SHA1

      9842789f836e59036f176d67aff61a077f9a032d

    • SHA256

      2f6352037ef047ccb691eb11eea341438a268b5ae95c51368faca811931350b5

    • SHA512

      b707a1e0c815f46a78c95d76896d51658fb111431c3e2cec2714f6aee40677f7c7180e7571b27ce7aecf046255a4b08a73d39b69348781bd8d57c352976e06c2

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks