General

  • Target

    b96521e35f551c19c1408a20e735d5567977396dc7c4c3c6cce95306cc7ae900

  • Size

    899KB

  • Sample

    241110-1qq6vayqcn

  • MD5

    8aeec6d32aeac238de89b1ab2f05e857

  • SHA1

    09296e0891748e9292f7404e7346ec24ac02847e

  • SHA256

    b96521e35f551c19c1408a20e735d5567977396dc7c4c3c6cce95306cc7ae900

  • SHA512

    6ea13938daec7acb1317c70a67bf3ecdb02e325a6a73f6bf60ed6663c07292df2465722693d90524fcf79dbb02cb19b4cecaa8d5955f4394a7c1181e82a928df

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b96521e35f551c19c1408a20e735d5567977396dc7c4c3c6cce95306cc7ae900

    • Size

      899KB

    • MD5

      8aeec6d32aeac238de89b1ab2f05e857

    • SHA1

      09296e0891748e9292f7404e7346ec24ac02847e

    • SHA256

      b96521e35f551c19c1408a20e735d5567977396dc7c4c3c6cce95306cc7ae900

    • SHA512

      6ea13938daec7acb1317c70a67bf3ecdb02e325a6a73f6bf60ed6663c07292df2465722693d90524fcf79dbb02cb19b4cecaa8d5955f4394a7c1181e82a928df

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks