General

  • Target

    3cb92bb93f52ebdc2ddaac7fbc91e440abe59765d4d9b89d68654541320f4e3a

  • Size

    50KB

  • Sample

    241110-py23jazndk

  • MD5

    fe7cb79f01a1a015608e689875716156

  • SHA1

    e3b96edabbd36f5240ae64e5bc5468b9bbfe91b0

  • SHA256

    3cb92bb93f52ebdc2ddaac7fbc91e440abe59765d4d9b89d68654541320f4e3a

  • SHA512

    aa758ec1fae0fb30f9a5656189f683a150fc2c5a9a5e1cd8bd0e5bcc338db550390c05e2b22e0b876f035439ac48c1a97f77fc176bd38912263bdb539ed30454

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5SJYH:W5ReWjTrW9rNPgYooJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3cb92bb93f52ebdc2ddaac7fbc91e440abe59765d4d9b89d68654541320f4e3a

    • Size

      50KB

    • MD5

      fe7cb79f01a1a015608e689875716156

    • SHA1

      e3b96edabbd36f5240ae64e5bc5468b9bbfe91b0

    • SHA256

      3cb92bb93f52ebdc2ddaac7fbc91e440abe59765d4d9b89d68654541320f4e3a

    • SHA512

      aa758ec1fae0fb30f9a5656189f683a150fc2c5a9a5e1cd8bd0e5bcc338db550390c05e2b22e0b876f035439ac48c1a97f77fc176bd38912263bdb539ed30454

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5SJYH:W5ReWjTrW9rNPgYooJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks