General

  • Target

    75a6ffdd686a15bf64e3cc0e1afdd1a868e2ea5daed0df904ec2340458271531

  • Size

    899KB

  • Sample

    241110-rbckgaxnat

  • MD5

    45e5c8002600121e414e425c2f7a088d

  • SHA1

    26dc1f594e66a8fcf60384b3983d1ce0e47f7791

  • SHA256

    75a6ffdd686a15bf64e3cc0e1afdd1a868e2ea5daed0df904ec2340458271531

  • SHA512

    3ea7aeb65e08ff0aa7bf4e6a2b364076aa02f3ffc2fd22832a901b4dfd910d4aced78a839fae84632860f602f1ca700f4ce54ca3183037f9d8ebd02ea732f7f1

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      75a6ffdd686a15bf64e3cc0e1afdd1a868e2ea5daed0df904ec2340458271531

    • Size

      899KB

    • MD5

      45e5c8002600121e414e425c2f7a088d

    • SHA1

      26dc1f594e66a8fcf60384b3983d1ce0e47f7791

    • SHA256

      75a6ffdd686a15bf64e3cc0e1afdd1a868e2ea5daed0df904ec2340458271531

    • SHA512

      3ea7aeb65e08ff0aa7bf4e6a2b364076aa02f3ffc2fd22832a901b4dfd910d4aced78a839fae84632860f602f1ca700f4ce54ca3183037f9d8ebd02ea732f7f1

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks