General

  • Target

    0733cbc3636bc7995b253e792e5a12a42f0e05450df3755db5d48950d4531fb9

  • Size

    899KB

  • Sample

    241110-r94fvayhqc

  • MD5

    4aae8b936e2e32f7d80be0ab29aeb9a9

  • SHA1

    6da6630d67badd7a89758a321a5870ced00107fc

  • SHA256

    0733cbc3636bc7995b253e792e5a12a42f0e05450df3755db5d48950d4531fb9

  • SHA512

    f6affc960abe26ec70a632ce275b399db172473a987671c054c11a13a737f4a4fe8734e9ac0728aebb96b34a20b9741a4761eacd4f04af6f90fb244d6d2f0aa4

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      0733cbc3636bc7995b253e792e5a12a42f0e05450df3755db5d48950d4531fb9

    • Size

      899KB

    • MD5

      4aae8b936e2e32f7d80be0ab29aeb9a9

    • SHA1

      6da6630d67badd7a89758a321a5870ced00107fc

    • SHA256

      0733cbc3636bc7995b253e792e5a12a42f0e05450df3755db5d48950d4531fb9

    • SHA512

      f6affc960abe26ec70a632ce275b399db172473a987671c054c11a13a737f4a4fe8734e9ac0728aebb96b34a20b9741a4761eacd4f04af6f90fb244d6d2f0aa4

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks