General

  • Target

    03f92f719ea94af4b867e525c18453659f0aac55be3c12ed8354b74778da00da

  • Size

    899KB

  • Sample

    241110-lxg47axnfp

  • MD5

    dd6ef4c7c32e4c6b6e480b9bf76b823b

  • SHA1

    1ff8a3c7c4356317b685a52d2d98b1649b3539a7

  • SHA256

    03f92f719ea94af4b867e525c18453659f0aac55be3c12ed8354b74778da00da

  • SHA512

    afc0d5595e67437cd4de8f74f329564dfc5f1916e09b1254bcbd95211b3404718c5df8d49c86938cee09ffeed3344d4b557dc65645b31e5b130f9b39a4ef539c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      03f92f719ea94af4b867e525c18453659f0aac55be3c12ed8354b74778da00da

    • Size

      899KB

    • MD5

      dd6ef4c7c32e4c6b6e480b9bf76b823b

    • SHA1

      1ff8a3c7c4356317b685a52d2d98b1649b3539a7

    • SHA256

      03f92f719ea94af4b867e525c18453659f0aac55be3c12ed8354b74778da00da

    • SHA512

      afc0d5595e67437cd4de8f74f329564dfc5f1916e09b1254bcbd95211b3404718c5df8d49c86938cee09ffeed3344d4b557dc65645b31e5b130f9b39a4ef539c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks