General

  • Target

    85e5edc9d7583380e2088cb006387b9e92694430fef309a505b97d4a1c22f1ef

  • Size

    899KB

  • Sample

    241110-an3travjhs

  • MD5

    457afd538bb294091eb7fcbfae17cdee

  • SHA1

    e13e87ba455c0d861f32a9f6eb59f567ecec8bb2

  • SHA256

    85e5edc9d7583380e2088cb006387b9e92694430fef309a505b97d4a1c22f1ef

  • SHA512

    9b484a898a5360b3a1f999383f9d1c256909070a1e3f5138b186f392be2241bb099f793b3ae7998681982c70b6707d472fa74ff6ed11fec954f975acd0408a63

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      85e5edc9d7583380e2088cb006387b9e92694430fef309a505b97d4a1c22f1ef

    • Size

      899KB

    • MD5

      457afd538bb294091eb7fcbfae17cdee

    • SHA1

      e13e87ba455c0d861f32a9f6eb59f567ecec8bb2

    • SHA256

      85e5edc9d7583380e2088cb006387b9e92694430fef309a505b97d4a1c22f1ef

    • SHA512

      9b484a898a5360b3a1f999383f9d1c256909070a1e3f5138b186f392be2241bb099f793b3ae7998681982c70b6707d472fa74ff6ed11fec954f975acd0408a63

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks