General

  • Target

    d28e9140c4a1a2652f7375b1a3dac46f5aa4499720088ee279fa17f33c625929

  • Size

    899KB

  • Sample

    241111-3sx4aaymdt

  • MD5

    8950325f9f63d613e8e9e569da10e365

  • SHA1

    f88bf73addab14bc82166f51cd62a0a915db412b

  • SHA256

    d28e9140c4a1a2652f7375b1a3dac46f5aa4499720088ee279fa17f33c625929

  • SHA512

    53e47481cee45ccb379e3582e0e88622806b5486e4bdebadf202555cd26125a21bd916c2f2a706e11b28065a43506ec2d93b36d3a1f8cb116b8f70d0bf8726a8

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXQ:7wqd87VQ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d28e9140c4a1a2652f7375b1a3dac46f5aa4499720088ee279fa17f33c625929

    • Size

      899KB

    • MD5

      8950325f9f63d613e8e9e569da10e365

    • SHA1

      f88bf73addab14bc82166f51cd62a0a915db412b

    • SHA256

      d28e9140c4a1a2652f7375b1a3dac46f5aa4499720088ee279fa17f33c625929

    • SHA512

      53e47481cee45ccb379e3582e0e88622806b5486e4bdebadf202555cd26125a21bd916c2f2a706e11b28065a43506ec2d93b36d3a1f8cb116b8f70d0bf8726a8

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXQ:7wqd87VQ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks