General

  • Target

    42e715f2eb1788e2ddd42f0da563293372bd9aec672516be959b826faad187b4

  • Size

    101KB

  • Sample

    241029-17z53sslgj

  • MD5

    79bf6c0b98067df04400fb8f8fcf775e

  • SHA1

    df1eab64bb989a9131995f281fcfb2b142a6fdfc

  • SHA256

    42e715f2eb1788e2ddd42f0da563293372bd9aec672516be959b826faad187b4

  • SHA512

    f0d6583e2c331c058490a21592f2291356cd7bfb9609637e70e3fcfbecf16df0a67179362ce83f5f1383611370da324fb9ad23a202c03b5043ef769b34aa1595

  • SSDEEP

    3072:lwZSQpKa3VGVnpUliz764/9xpEEBqbZuwO5iG:MJVGpRx9b3wZuwO4G

Score
10/10

Malware Config

Targets

    • Target

      42e715f2eb1788e2ddd42f0da563293372bd9aec672516be959b826faad187b4

    • Size

      101KB

    • MD5

      79bf6c0b98067df04400fb8f8fcf775e

    • SHA1

      df1eab64bb989a9131995f281fcfb2b142a6fdfc

    • SHA256

      42e715f2eb1788e2ddd42f0da563293372bd9aec672516be959b826faad187b4

    • SHA512

      f0d6583e2c331c058490a21592f2291356cd7bfb9609637e70e3fcfbecf16df0a67179362ce83f5f1383611370da324fb9ad23a202c03b5043ef769b34aa1595

    • SSDEEP

      3072:lwZSQpKa3VGVnpUliz764/9xpEEBqbZuwO5iG:MJVGpRx9b3wZuwO4G

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks