General

  • Target

    82ad80983ae44ef8c56e88c93be65b29001d676022cff3bf3d5bc83098554aa6

  • Size

    899KB

  • Sample

    241110-zpvl7svgkg

  • MD5

    a75d6beeb6ebd5242a617bc67c927035

  • SHA1

    b5d912ef445d7282d18155601b1eda4e1148d08b

  • SHA256

    82ad80983ae44ef8c56e88c93be65b29001d676022cff3bf3d5bc83098554aa6

  • SHA512

    5ead8fa2bd35dcccc3392a91cdf4602191e2c7d93894edbdd136ef9fd101b2fef8056401786c656d18c001f9d5e33cc18e44dc3e0f63982f8ad123ea9cecf21a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      82ad80983ae44ef8c56e88c93be65b29001d676022cff3bf3d5bc83098554aa6

    • Size

      899KB

    • MD5

      a75d6beeb6ebd5242a617bc67c927035

    • SHA1

      b5d912ef445d7282d18155601b1eda4e1148d08b

    • SHA256

      82ad80983ae44ef8c56e88c93be65b29001d676022cff3bf3d5bc83098554aa6

    • SHA512

      5ead8fa2bd35dcccc3392a91cdf4602191e2c7d93894edbdd136ef9fd101b2fef8056401786c656d18c001f9d5e33cc18e44dc3e0f63982f8ad123ea9cecf21a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks