General

  • Target

    f45446027b316f65fa593a0abe4b05a00599d1500e9d669201aa26a42c4de104

  • Size

    899KB

  • Sample

    241110-k1lq4stjax

  • MD5

    cbfded53e29c638b6d156d4fae7c84b5

  • SHA1

    a242cf56fd19f68fd1494fa56b938211b53de8be

  • SHA256

    f45446027b316f65fa593a0abe4b05a00599d1500e9d669201aa26a42c4de104

  • SHA512

    cf7ce79d04799b45b37f166ef854b141e7958f9931a277bf40af4c038d805affd2874b74416563dd4af20ae90e74a97564e15b11093a33592ed65de2e617458c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f45446027b316f65fa593a0abe4b05a00599d1500e9d669201aa26a42c4de104

    • Size

      899KB

    • MD5

      cbfded53e29c638b6d156d4fae7c84b5

    • SHA1

      a242cf56fd19f68fd1494fa56b938211b53de8be

    • SHA256

      f45446027b316f65fa593a0abe4b05a00599d1500e9d669201aa26a42c4de104

    • SHA512

      cf7ce79d04799b45b37f166ef854b141e7958f9931a277bf40af4c038d805affd2874b74416563dd4af20ae90e74a97564e15b11093a33592ed65de2e617458c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks