General

  • Target

    f6052f7718cbbaf3d119ca77a57a37edbb9b2d5ffde26098580bbbf6ccd1291a

  • Size

    899KB

  • Sample

    241110-p1wnjaxdle

  • MD5

    b7e4f446cddc6e3e5b8dcadc13a4fc70

  • SHA1

    43b516566e1ccb069064eae1fb02eee5cfe42f15

  • SHA256

    f6052f7718cbbaf3d119ca77a57a37edbb9b2d5ffde26098580bbbf6ccd1291a

  • SHA512

    255636ed3e78835b06275fc16eb031fb42097a9a7e9b9b118258a66413256941ff2887b3f51de9ec5a1cd2c21dbd2263814f87b2ee51248723533ce3c334af4c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f6052f7718cbbaf3d119ca77a57a37edbb9b2d5ffde26098580bbbf6ccd1291a

    • Size

      899KB

    • MD5

      b7e4f446cddc6e3e5b8dcadc13a4fc70

    • SHA1

      43b516566e1ccb069064eae1fb02eee5cfe42f15

    • SHA256

      f6052f7718cbbaf3d119ca77a57a37edbb9b2d5ffde26098580bbbf6ccd1291a

    • SHA512

      255636ed3e78835b06275fc16eb031fb42097a9a7e9b9b118258a66413256941ff2887b3f51de9ec5a1cd2c21dbd2263814f87b2ee51248723533ce3c334af4c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks