General

  • Target

    a680424df23cd502aa1bc2540cc26a726399801b6a403c53117f0a0cf48b6b95

  • Size

    899KB

  • Sample

    241110-hkxgkavlhp

  • MD5

    41b0f384225c28b3774009584ae9cb28

  • SHA1

    a65c1fbc67cb8084b8c6194934c3829f3addc368

  • SHA256

    a680424df23cd502aa1bc2540cc26a726399801b6a403c53117f0a0cf48b6b95

  • SHA512

    4f4784e658d872029003d4a52367fa636a7e78b8aa1e8269529680b7142b1858c588dbf7bb1deec399a22666ed7108ff864d8c99aeac5954fd2a95e713e70eeb

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a680424df23cd502aa1bc2540cc26a726399801b6a403c53117f0a0cf48b6b95

    • Size

      899KB

    • MD5

      41b0f384225c28b3774009584ae9cb28

    • SHA1

      a65c1fbc67cb8084b8c6194934c3829f3addc368

    • SHA256

      a680424df23cd502aa1bc2540cc26a726399801b6a403c53117f0a0cf48b6b95

    • SHA512

      4f4784e658d872029003d4a52367fa636a7e78b8aa1e8269529680b7142b1858c588dbf7bb1deec399a22666ed7108ff864d8c99aeac5954fd2a95e713e70eeb

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks