General

  • Target

    eba6978e0d55ff04c0734b77e35e851f18a33c2fa731a35d40d4f46f5ec45d33

  • Size

    899KB

  • Sample

    241110-py4w5axcrf

  • MD5

    2c88d6b5375318ac76c2c48aab353def

  • SHA1

    d9b3a5b8a87d49848e312fc72fc5a85ece3ff400

  • SHA256

    eba6978e0d55ff04c0734b77e35e851f18a33c2fa731a35d40d4f46f5ec45d33

  • SHA512

    02eecedfbfa7a92fe1e9832636efe5572563d45c485e6b5d03eed356f0c3c62793f1cdcebb4d626194e4e879dd26a79e62e8abc8b6cc695d069b99555d32d106

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      eba6978e0d55ff04c0734b77e35e851f18a33c2fa731a35d40d4f46f5ec45d33

    • Size

      899KB

    • MD5

      2c88d6b5375318ac76c2c48aab353def

    • SHA1

      d9b3a5b8a87d49848e312fc72fc5a85ece3ff400

    • SHA256

      eba6978e0d55ff04c0734b77e35e851f18a33c2fa731a35d40d4f46f5ec45d33

    • SHA512

      02eecedfbfa7a92fe1e9832636efe5572563d45c485e6b5d03eed356f0c3c62793f1cdcebb4d626194e4e879dd26a79e62e8abc8b6cc695d069b99555d32d106

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks