General

  • Target

    85473b032585780e94f83b9b3125c92e77f0d301005135e3cb00100a3f85dabd

  • Size

    899KB

  • Sample

    241110-zs6hwayjfm

  • MD5

    2f53b3d60a626f8d5b240221578f4faa

  • SHA1

    c845b1d821a6b7e556ceef95c68f2db862816162

  • SHA256

    85473b032585780e94f83b9b3125c92e77f0d301005135e3cb00100a3f85dabd

  • SHA512

    d6796dd63511057a3cb995182be25457dd5d0ff3314ca55939c99acc564982f1c3566dc97d4799ac9b11dece62218c2db6b7e22adc4645eb263feebb1233c809

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXL:7wqd87VL

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      85473b032585780e94f83b9b3125c92e77f0d301005135e3cb00100a3f85dabd

    • Size

      899KB

    • MD5

      2f53b3d60a626f8d5b240221578f4faa

    • SHA1

      c845b1d821a6b7e556ceef95c68f2db862816162

    • SHA256

      85473b032585780e94f83b9b3125c92e77f0d301005135e3cb00100a3f85dabd

    • SHA512

      d6796dd63511057a3cb995182be25457dd5d0ff3314ca55939c99acc564982f1c3566dc97d4799ac9b11dece62218c2db6b7e22adc4645eb263feebb1233c809

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXL:7wqd87VL

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks