General

  • Target

    b92711d42f630f51987a37cbc55bfd618ac94c37867d3f977aa1bb8136b375c1

  • Size

    899KB

  • Sample

    241110-1ws8dswdjn

  • MD5

    be9f3c4e4b1ac48a3338a10ae7c0987f

  • SHA1

    e176a602e526e057089c718baa949b43dbdb4098

  • SHA256

    b92711d42f630f51987a37cbc55bfd618ac94c37867d3f977aa1bb8136b375c1

  • SHA512

    d338b8f84a7e7ac0cd76f01a7ca4ab9cef4fc35d09166db540e43e3afd05a8782fcc3b2ba4e5d2728e34722f2fdb1c6b9f83cf1747351877a028481d77f81991

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b92711d42f630f51987a37cbc55bfd618ac94c37867d3f977aa1bb8136b375c1

    • Size

      899KB

    • MD5

      be9f3c4e4b1ac48a3338a10ae7c0987f

    • SHA1

      e176a602e526e057089c718baa949b43dbdb4098

    • SHA256

      b92711d42f630f51987a37cbc55bfd618ac94c37867d3f977aa1bb8136b375c1

    • SHA512

      d338b8f84a7e7ac0cd76f01a7ca4ab9cef4fc35d09166db540e43e3afd05a8782fcc3b2ba4e5d2728e34722f2fdb1c6b9f83cf1747351877a028481d77f81991

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks