General

  • Target

    4ef650eebefc04dd49ecbc01b367bc2cb56fd37ca1c8f2b1b370adea4dda48b1

  • Size

    899KB

  • Sample

    241110-hhvvys1mbw

  • MD5

    a8ffbc5114a580e6bcfc2a5dec900c61

  • SHA1

    37433923f1cb4c11a65672c62d1a98db0f2203b2

  • SHA256

    4ef650eebefc04dd49ecbc01b367bc2cb56fd37ca1c8f2b1b370adea4dda48b1

  • SHA512

    389f4eaa694b9394b7235b9e70fbe7d9f0cd844e5cddb54768f17ee7ea8396394e344ab6230e8331a1723b1f6d274981429cf7f4b1707bf15d0705266164932a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4ef650eebefc04dd49ecbc01b367bc2cb56fd37ca1c8f2b1b370adea4dda48b1

    • Size

      899KB

    • MD5

      a8ffbc5114a580e6bcfc2a5dec900c61

    • SHA1

      37433923f1cb4c11a65672c62d1a98db0f2203b2

    • SHA256

      4ef650eebefc04dd49ecbc01b367bc2cb56fd37ca1c8f2b1b370adea4dda48b1

    • SHA512

      389f4eaa694b9394b7235b9e70fbe7d9f0cd844e5cddb54768f17ee7ea8396394e344ab6230e8331a1723b1f6d274981429cf7f4b1707bf15d0705266164932a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks