General

  • Target

    8ee3e5ebbe3a597127441cbdcba8391a6cf2af6fa81a09b4fc67534be199ba4e

  • Size

    899KB

  • Sample

    241110-an2axsvhrd

  • MD5

    4a5bb2a027f55cd72c641a112b92b9be

  • SHA1

    812874cb4638b42ca9a09ade427ea08967cf75bc

  • SHA256

    8ee3e5ebbe3a597127441cbdcba8391a6cf2af6fa81a09b4fc67534be199ba4e

  • SHA512

    30df3355d52f620558149c719d8edb63ba54e2d38fc186d37ffffa6be75df6f04375a82b33054d774cd1cbde3269933b919cbbd74ab7097095cd98dc5425da77

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      8ee3e5ebbe3a597127441cbdcba8391a6cf2af6fa81a09b4fc67534be199ba4e

    • Size

      899KB

    • MD5

      4a5bb2a027f55cd72c641a112b92b9be

    • SHA1

      812874cb4638b42ca9a09ade427ea08967cf75bc

    • SHA256

      8ee3e5ebbe3a597127441cbdcba8391a6cf2af6fa81a09b4fc67534be199ba4e

    • SHA512

      30df3355d52f620558149c719d8edb63ba54e2d38fc186d37ffffa6be75df6f04375a82b33054d774cd1cbde3269933b919cbbd74ab7097095cd98dc5425da77

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks