General

  • Target

    262cb95d08e86dcf20f949cc0cf7a435154258bdec96682da55fb9244fe7e94a

  • Size

    899KB

  • Sample

    241110-jjjprawjcn

  • MD5

    f9077ede8c466b966af4cd2ca7ad7e66

  • SHA1

    5a5ec60db84762ef80560b6e02b6bf0f1425455d

  • SHA256

    262cb95d08e86dcf20f949cc0cf7a435154258bdec96682da55fb9244fe7e94a

  • SHA512

    070d12cbe9585e85456f7c3f95ccbfeedb2281dd6c9162d6f65b6827e62ca798b399f9be6f0b557bf91920e14efaccfcae0bd77cfd7a44ee430cf6a39e3b32ab

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      262cb95d08e86dcf20f949cc0cf7a435154258bdec96682da55fb9244fe7e94a

    • Size

      899KB

    • MD5

      f9077ede8c466b966af4cd2ca7ad7e66

    • SHA1

      5a5ec60db84762ef80560b6e02b6bf0f1425455d

    • SHA256

      262cb95d08e86dcf20f949cc0cf7a435154258bdec96682da55fb9244fe7e94a

    • SHA512

      070d12cbe9585e85456f7c3f95ccbfeedb2281dd6c9162d6f65b6827e62ca798b399f9be6f0b557bf91920e14efaccfcae0bd77cfd7a44ee430cf6a39e3b32ab

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks