General

  • Target

    15860ea0e836dc1ec6b9a72d20cb4715f1805f6739b99e41a5d531664dfa9edc

  • Size

    899KB

  • Sample

    241110-py3ztsxaqj

  • MD5

    7673842b150e990c00fa86565f1068a9

  • SHA1

    a5027d805e501be46a637d0553170e4670e79ee3

  • SHA256

    15860ea0e836dc1ec6b9a72d20cb4715f1805f6739b99e41a5d531664dfa9edc

  • SHA512

    2b5ee42f72796fbc861ce04acb0c817f2629f5ff7cd4106f615e916564662145ce62f2caa2676d614c918119798d7fd591e299b73be9a09cb1adab73fcc1cfda

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      15860ea0e836dc1ec6b9a72d20cb4715f1805f6739b99e41a5d531664dfa9edc

    • Size

      899KB

    • MD5

      7673842b150e990c00fa86565f1068a9

    • SHA1

      a5027d805e501be46a637d0553170e4670e79ee3

    • SHA256

      15860ea0e836dc1ec6b9a72d20cb4715f1805f6739b99e41a5d531664dfa9edc

    • SHA512

      2b5ee42f72796fbc861ce04acb0c817f2629f5ff7cd4106f615e916564662145ce62f2caa2676d614c918119798d7fd591e299b73be9a09cb1adab73fcc1cfda

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks