General

  • Target

    10d0cd76e686c4e4d404aab4ff770f6f0313966eb4decf4b658abb20820b0d08

  • Size

    899KB

  • Sample

    241110-p11x9azngm

  • MD5

    2ac21bb158830a69d8b6c1dd78411966

  • SHA1

    ccbddff04245edac0d2f3d982b43ea9a569c71fe

  • SHA256

    10d0cd76e686c4e4d404aab4ff770f6f0313966eb4decf4b658abb20820b0d08

  • SHA512

    b58652cf47dea92d618a63520279c49eb5df3d0d5968ed0b35833d1ba2e8876ab3986b058f9733eebc4de7a03992c155044c1869fcea6d333031eac993502ffd

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      10d0cd76e686c4e4d404aab4ff770f6f0313966eb4decf4b658abb20820b0d08

    • Size

      899KB

    • MD5

      2ac21bb158830a69d8b6c1dd78411966

    • SHA1

      ccbddff04245edac0d2f3d982b43ea9a569c71fe

    • SHA256

      10d0cd76e686c4e4d404aab4ff770f6f0313966eb4decf4b658abb20820b0d08

    • SHA512

      b58652cf47dea92d618a63520279c49eb5df3d0d5968ed0b35833d1ba2e8876ab3986b058f9733eebc4de7a03992c155044c1869fcea6d333031eac993502ffd

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks