General

  • Target

    42df503655d60445065b92857a070006df3903fc6e71f4d80bb6dc6b672fc68b

  • Size

    899KB

  • Sample

    241110-r4z68syemm

  • MD5

    8e14225863b76c5b49b258a475d28c99

  • SHA1

    ddf0fa9045b49ed1cd6c66b12e777fa54482ecba

  • SHA256

    42df503655d60445065b92857a070006df3903fc6e71f4d80bb6dc6b672fc68b

  • SHA512

    f5ec086ee00b40d9e1394d2d2fdc8f257a207c73895e38229398e538d1179aa5428661ea7095d608d8551bd9868b678b6bb292c1170bf310fb43c0c497dc11b4

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      42df503655d60445065b92857a070006df3903fc6e71f4d80bb6dc6b672fc68b

    • Size

      899KB

    • MD5

      8e14225863b76c5b49b258a475d28c99

    • SHA1

      ddf0fa9045b49ed1cd6c66b12e777fa54482ecba

    • SHA256

      42df503655d60445065b92857a070006df3903fc6e71f4d80bb6dc6b672fc68b

    • SHA512

      f5ec086ee00b40d9e1394d2d2fdc8f257a207c73895e38229398e538d1179aa5428661ea7095d608d8551bd9868b678b6bb292c1170bf310fb43c0c497dc11b4

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks