General

  • Target

    e52bbe783ebeb0679f350da44a32f477792e73f49ac72b1032221f65550d26fc

  • Size

    899KB

  • Sample

    241110-py4alaxcre

  • MD5

    c8b2519a9e2b75c499e7cec8221fa8b8

  • SHA1

    407c7182484a5a2d2f254fed03e34047772b660b

  • SHA256

    e52bbe783ebeb0679f350da44a32f477792e73f49ac72b1032221f65550d26fc

  • SHA512

    05aaa5424daaae114c9f8b777ebbfc16ccda59e625d52b424db47d0f034fe6a72d3634c13f8d8feccc0b6c33326f7ecf400b7e5a7f01aea4dfda316c848e9312

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      e52bbe783ebeb0679f350da44a32f477792e73f49ac72b1032221f65550d26fc

    • Size

      899KB

    • MD5

      c8b2519a9e2b75c499e7cec8221fa8b8

    • SHA1

      407c7182484a5a2d2f254fed03e34047772b660b

    • SHA256

      e52bbe783ebeb0679f350da44a32f477792e73f49ac72b1032221f65550d26fc

    • SHA512

      05aaa5424daaae114c9f8b777ebbfc16ccda59e625d52b424db47d0f034fe6a72d3634c13f8d8feccc0b6c33326f7ecf400b7e5a7f01aea4dfda316c848e9312

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks