General

  • Target

    3a28b094ffd52f59a8498a2253f7bdab8db2c86db799b4efbdc05edb460636a0

  • Size

    899KB

  • Sample

    241110-lx561sxngq

  • MD5

    f1f71e37f17e348c88e1234eda60b49e

  • SHA1

    222fe698b7ef8692f090fe99f671ef0b6662b2a5

  • SHA256

    3a28b094ffd52f59a8498a2253f7bdab8db2c86db799b4efbdc05edb460636a0

  • SHA512

    ed035282736761224eb20511d1f11dcd141644689c39238c9b6f77673d64c608075fad4b87231b6f87b81b87b914a19adf762b9d9858d4fe2904a6c2a15bce11

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3a28b094ffd52f59a8498a2253f7bdab8db2c86db799b4efbdc05edb460636a0

    • Size

      899KB

    • MD5

      f1f71e37f17e348c88e1234eda60b49e

    • SHA1

      222fe698b7ef8692f090fe99f671ef0b6662b2a5

    • SHA256

      3a28b094ffd52f59a8498a2253f7bdab8db2c86db799b4efbdc05edb460636a0

    • SHA512

      ed035282736761224eb20511d1f11dcd141644689c39238c9b6f77673d64c608075fad4b87231b6f87b81b87b914a19adf762b9d9858d4fe2904a6c2a15bce11

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks