General

  • Target

    937a52ca7c1c51265d5b02225c30ef58c9fe613e79277877d4e583553bea47f0

  • Size

    899KB

  • Sample

    241110-nzz4wsyrfj

  • MD5

    66d67f75327cb0bffeee179b9c1b92ca

  • SHA1

    89a897ff6bf46de001ca9870b59f8e27c7ea4c28

  • SHA256

    937a52ca7c1c51265d5b02225c30ef58c9fe613e79277877d4e583553bea47f0

  • SHA512

    fbb847fa490124aefecf27df5f6bad2519c343ac94955594020ea684076c14d70b31f46f7cc323431754fdd801b9d3e758effd008322ffdb40d1024d5f02a20e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      937a52ca7c1c51265d5b02225c30ef58c9fe613e79277877d4e583553bea47f0

    • Size

      899KB

    • MD5

      66d67f75327cb0bffeee179b9c1b92ca

    • SHA1

      89a897ff6bf46de001ca9870b59f8e27c7ea4c28

    • SHA256

      937a52ca7c1c51265d5b02225c30ef58c9fe613e79277877d4e583553bea47f0

    • SHA512

      fbb847fa490124aefecf27df5f6bad2519c343ac94955594020ea684076c14d70b31f46f7cc323431754fdd801b9d3e758effd008322ffdb40d1024d5f02a20e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks