General

  • Target

    4eb8850feae60612a090f1690bea3ab842fc247db913f0af135a162cc8620edd

  • Size

    899KB

  • Sample

    241014-rprxbatdkj

  • MD5

    f8c661bb93640ede3fd7f05642254498

  • SHA1

    acf053836c3f78d8178e042ee1563d9920d305c8

  • SHA256

    4eb8850feae60612a090f1690bea3ab842fc247db913f0af135a162cc8620edd

  • SHA512

    cf255c82e3ae658f74fd65091111ba11493600c460ae10fda6ba1f4a428f2fb547af4a1209d522e5d38fbed6d415ed5d547c331de68eac63bce1040fdd8d0901

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXj:7wqd87Vj

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4eb8850feae60612a090f1690bea3ab842fc247db913f0af135a162cc8620edd

    • Size

      899KB

    • MD5

      f8c661bb93640ede3fd7f05642254498

    • SHA1

      acf053836c3f78d8178e042ee1563d9920d305c8

    • SHA256

      4eb8850feae60612a090f1690bea3ab842fc247db913f0af135a162cc8620edd

    • SHA512

      cf255c82e3ae658f74fd65091111ba11493600c460ae10fda6ba1f4a428f2fb547af4a1209d522e5d38fbed6d415ed5d547c331de68eac63bce1040fdd8d0901

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXj:7wqd87Vj

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks