General

  • Target

    a559b7d6361cb49ed0176bfc1b61e23c7ce08787d8914c5993f92129ae52059f

  • Size

    899KB

  • Sample

    241110-1t9scsvrev

  • MD5

    a7510daabb130ef75baa01cc14ef21b4

  • SHA1

    8d09ccb65893ab16e94bfda8c3b2c6c7ec805e0f

  • SHA256

    a559b7d6361cb49ed0176bfc1b61e23c7ce08787d8914c5993f92129ae52059f

  • SHA512

    b8adedbea74e0f88a120d093873f95e5187df6cd7ccb689e143a192dac3c9761de74d6985a4522606b8e17be07f061c3940bdab994913b35437ae300bb8452cf

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXL:7wqd87VL

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a559b7d6361cb49ed0176bfc1b61e23c7ce08787d8914c5993f92129ae52059f

    • Size

      899KB

    • MD5

      a7510daabb130ef75baa01cc14ef21b4

    • SHA1

      8d09ccb65893ab16e94bfda8c3b2c6c7ec805e0f

    • SHA256

      a559b7d6361cb49ed0176bfc1b61e23c7ce08787d8914c5993f92129ae52059f

    • SHA512

      b8adedbea74e0f88a120d093873f95e5187df6cd7ccb689e143a192dac3c9761de74d6985a4522606b8e17be07f061c3940bdab994913b35437ae300bb8452cf

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXL:7wqd87VL

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks