General

  • Target

    794931b3505b7d55c957413e53fe88025c110ba195fe76f2b89ddd67ea789be4

  • Size

    899KB

  • Sample

    241018-drj3laxamn

  • MD5

    43cccba24d13e0d12ed9d787dd8f91df

  • SHA1

    7867dcadf847c40971f0949993d4da6d7175b289

  • SHA256

    794931b3505b7d55c957413e53fe88025c110ba195fe76f2b89ddd67ea789be4

  • SHA512

    4976f5fdcb80edb6c4de19b98776a28137ef20ee94d21b5ee4e37f4f49bf4e252c0b7916c28e19054e3704dff0ac883f387190ea44a1cc9a0205a5e685a9ce55

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      794931b3505b7d55c957413e53fe88025c110ba195fe76f2b89ddd67ea789be4

    • Size

      899KB

    • MD5

      43cccba24d13e0d12ed9d787dd8f91df

    • SHA1

      7867dcadf847c40971f0949993d4da6d7175b289

    • SHA256

      794931b3505b7d55c957413e53fe88025c110ba195fe76f2b89ddd67ea789be4

    • SHA512

      4976f5fdcb80edb6c4de19b98776a28137ef20ee94d21b5ee4e37f4f49bf4e252c0b7916c28e19054e3704dff0ac883f387190ea44a1cc9a0205a5e685a9ce55

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks