General

  • Target

    321139d569691371db24b26e0c445fcc96303e0c706553b5024f9ba6acdde65d

  • Size

    899KB

  • Sample

    241110-1ykn2awjb1

  • MD5

    677a37b58f2b7fb4462c6da855b6e502

  • SHA1

    8e42c9d154a74a7e014d185e63168c612ff742b0

  • SHA256

    321139d569691371db24b26e0c445fcc96303e0c706553b5024f9ba6acdde65d

  • SHA512

    e1ba8789e1e90f0ec14ebbffcc6d43a6694b6340bd8c84c317c06c06a93f75e6977668ceb7399eef9e16dd6c737b599a1b62ede11092812ee91364b9076fe904

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      321139d569691371db24b26e0c445fcc96303e0c706553b5024f9ba6acdde65d

    • Size

      899KB

    • MD5

      677a37b58f2b7fb4462c6da855b6e502

    • SHA1

      8e42c9d154a74a7e014d185e63168c612ff742b0

    • SHA256

      321139d569691371db24b26e0c445fcc96303e0c706553b5024f9ba6acdde65d

    • SHA512

      e1ba8789e1e90f0ec14ebbffcc6d43a6694b6340bd8c84c317c06c06a93f75e6977668ceb7399eef9e16dd6c737b599a1b62ede11092812ee91364b9076fe904

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks