General

  • Target

    eedb7c5cc72fbb96936ee716e6fa37215c5bc966824be8f30c02c536db65bd81

  • Size

    899KB

  • Sample

    241110-zp92wsyjbm

  • MD5

    be96ceb11066bdbf3d39f7c93b41b1e5

  • SHA1

    e2b887dc88a8111382bcd1902087574b8248ef8f

  • SHA256

    eedb7c5cc72fbb96936ee716e6fa37215c5bc966824be8f30c02c536db65bd81

  • SHA512

    ca46d83edd15e3b72abe8294d1dd4d2bdd108a346a439037980272a19b0549b6d48bb0a493c641b2aa5e31517b6911e7c2f64314058f3a75458fabe5f7c62617

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      eedb7c5cc72fbb96936ee716e6fa37215c5bc966824be8f30c02c536db65bd81

    • Size

      899KB

    • MD5

      be96ceb11066bdbf3d39f7c93b41b1e5

    • SHA1

      e2b887dc88a8111382bcd1902087574b8248ef8f

    • SHA256

      eedb7c5cc72fbb96936ee716e6fa37215c5bc966824be8f30c02c536db65bd81

    • SHA512

      ca46d83edd15e3b72abe8294d1dd4d2bdd108a346a439037980272a19b0549b6d48bb0a493c641b2aa5e31517b6911e7c2f64314058f3a75458fabe5f7c62617

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks