General

  • Target

    62a968be3c2f679ec10b981bb6ac65c81828b2f2206fc74176f12e58f1ae669f

  • Size

    899KB

  • Sample

    241110-p7fwnaxena

  • MD5

    5ed2e912e6dc15c553c58c217fef95e1

  • SHA1

    f73ca4087e672986b461016ec4ff3fa85f5c42a2

  • SHA256

    62a968be3c2f679ec10b981bb6ac65c81828b2f2206fc74176f12e58f1ae669f

  • SHA512

    717d78dc0749e750a62753be7753667b0a11d7a716d042a9456fae5c1831db3b018a8199e73e4dff9ffe3ee9b4b71a6200c3a0116e443c4f11c0f00803cfe645

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      62a968be3c2f679ec10b981bb6ac65c81828b2f2206fc74176f12e58f1ae669f

    • Size

      899KB

    • MD5

      5ed2e912e6dc15c553c58c217fef95e1

    • SHA1

      f73ca4087e672986b461016ec4ff3fa85f5c42a2

    • SHA256

      62a968be3c2f679ec10b981bb6ac65c81828b2f2206fc74176f12e58f1ae669f

    • SHA512

      717d78dc0749e750a62753be7753667b0a11d7a716d042a9456fae5c1831db3b018a8199e73e4dff9ffe3ee9b4b71a6200c3a0116e443c4f11c0f00803cfe645

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks