General

  • Target

    d32b8b8f3d7aeea45dd7b3037623b5ed870fc1793fab035f4c5cd247da9f900f

  • Size

    899KB

  • Sample

    241110-xclsessjfx

  • MD5

    ea19393d82f60f7b6db013c04c3de24e

  • SHA1

    cac1dfe9e26f46390e8c09a4a9a2d109096671ed

  • SHA256

    d32b8b8f3d7aeea45dd7b3037623b5ed870fc1793fab035f4c5cd247da9f900f

  • SHA512

    bb15ac241fb9c42fd9aabab9fb774768d9a11b5deeba8efa00614bd6644d437239a44bb426f6dc04ae62284a15b610ca8f59a723d22f665f4f724a2f2e27ec5c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d32b8b8f3d7aeea45dd7b3037623b5ed870fc1793fab035f4c5cd247da9f900f

    • Size

      899KB

    • MD5

      ea19393d82f60f7b6db013c04c3de24e

    • SHA1

      cac1dfe9e26f46390e8c09a4a9a2d109096671ed

    • SHA256

      d32b8b8f3d7aeea45dd7b3037623b5ed870fc1793fab035f4c5cd247da9f900f

    • SHA512

      bb15ac241fb9c42fd9aabab9fb774768d9a11b5deeba8efa00614bd6644d437239a44bb426f6dc04ae62284a15b610ca8f59a723d22f665f4f724a2f2e27ec5c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks