General

  • Target

    073473fd7f811d48905dfab999597d3810c5f9852813ab4873087fa086296a07

  • Size

    50KB

  • Sample

    241111-3sw6zszdjl

  • MD5

    a3fc95da1a01345f7555bd2a95f08e33

  • SHA1

    b484fa4c8b7e48f81789ac23d2c81d9140b4477e

  • SHA256

    073473fd7f811d48905dfab999597d3810c5f9852813ab4873087fa086296a07

  • SHA512

    fcc55594f48d905a82e8b4898b130a301fefea7f637ab129d0ed44b6e08160aa9fb70b0d790853da8a3d4ee3a15d4aba8e280ddc51f94064b5813b1f43f53ad6

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5TJYH:W5ReWjTrW9rNPgYo1JYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      073473fd7f811d48905dfab999597d3810c5f9852813ab4873087fa086296a07

    • Size

      50KB

    • MD5

      a3fc95da1a01345f7555bd2a95f08e33

    • SHA1

      b484fa4c8b7e48f81789ac23d2c81d9140b4477e

    • SHA256

      073473fd7f811d48905dfab999597d3810c5f9852813ab4873087fa086296a07

    • SHA512

      fcc55594f48d905a82e8b4898b130a301fefea7f637ab129d0ed44b6e08160aa9fb70b0d790853da8a3d4ee3a15d4aba8e280ddc51f94064b5813b1f43f53ad6

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5TJYH:W5ReWjTrW9rNPgYo1JYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks