General

  • Target

    ceb3dceef63b7a125824258b8be547cebaebf6b3efa6627e7f23960655d4027b

  • Size

    899KB

  • Sample

    241110-1w4n5avrg1

  • MD5

    1e4ad9c8bb2df20c8e3dd516e486cf0b

  • SHA1

    ad4d3b1279010e2a8b1f6008b5f39ea79d0545bb

  • SHA256

    ceb3dceef63b7a125824258b8be547cebaebf6b3efa6627e7f23960655d4027b

  • SHA512

    9eaca370f1dcaeb48c353a9ded76104d34095dfa6a16b9ccdff5a52478439bb53b220a1a5e5e3cfa8b6c299ba86c31b1ed6d4f2600434246aa8663c54bc653d9

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXr:7wqd87Vr

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ceb3dceef63b7a125824258b8be547cebaebf6b3efa6627e7f23960655d4027b

    • Size

      899KB

    • MD5

      1e4ad9c8bb2df20c8e3dd516e486cf0b

    • SHA1

      ad4d3b1279010e2a8b1f6008b5f39ea79d0545bb

    • SHA256

      ceb3dceef63b7a125824258b8be547cebaebf6b3efa6627e7f23960655d4027b

    • SHA512

      9eaca370f1dcaeb48c353a9ded76104d34095dfa6a16b9ccdff5a52478439bb53b220a1a5e5e3cfa8b6c299ba86c31b1ed6d4f2600434246aa8663c54bc653d9

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXr:7wqd87Vr

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks