General

  • Target

    7caeb2c951499c567b88c712d19ca6d5e6832dfdb0e7208b3d30d5c8e80d10ed

  • Size

    899KB

  • Sample

    241111-3vjnnszdmr

  • MD5

    b6898e1adbd614cdc838adcacc64ae02

  • SHA1

    c4e5f8e7f49a140dd3b6d3aeb8904f6f06f7874a

  • SHA256

    7caeb2c951499c567b88c712d19ca6d5e6832dfdb0e7208b3d30d5c8e80d10ed

  • SHA512

    cdf9e888518d58777ce284e0d233a345bddc38869bb5b6bffbac27900583d423a96f9d252c05c6f06d05a742368eff15893693803e2137b79b0d7b541002aab6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7caeb2c951499c567b88c712d19ca6d5e6832dfdb0e7208b3d30d5c8e80d10ed

    • Size

      899KB

    • MD5

      b6898e1adbd614cdc838adcacc64ae02

    • SHA1

      c4e5f8e7f49a140dd3b6d3aeb8904f6f06f7874a

    • SHA256

      7caeb2c951499c567b88c712d19ca6d5e6832dfdb0e7208b3d30d5c8e80d10ed

    • SHA512

      cdf9e888518d58777ce284e0d233a345bddc38869bb5b6bffbac27900583d423a96f9d252c05c6f06d05a742368eff15893693803e2137b79b0d7b541002aab6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks