General

  • Target

    f0692f560f9bb5268db712159e485fca5dde5944329f1a6964a0d5a4de0b9e83

  • Size

    899KB

  • Sample

    241111-3vslksymgw

  • MD5

    1840ae43957a6cd351663c97a6532662

  • SHA1

    a7e46de0625d6ab71cba0f9ae5d0e7ed9e7976cf

  • SHA256

    f0692f560f9bb5268db712159e485fca5dde5944329f1a6964a0d5a4de0b9e83

  • SHA512

    ba0a181dbe8ae6dfcae74853c3466e64f372a692c2005138d454fa93668ceafa6b7628c62c98877b098656492dd63bfaebbfade8b1eb80a92830ad60f80b01f0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f0692f560f9bb5268db712159e485fca5dde5944329f1a6964a0d5a4de0b9e83

    • Size

      899KB

    • MD5

      1840ae43957a6cd351663c97a6532662

    • SHA1

      a7e46de0625d6ab71cba0f9ae5d0e7ed9e7976cf

    • SHA256

      f0692f560f9bb5268db712159e485fca5dde5944329f1a6964a0d5a4de0b9e83

    • SHA512

      ba0a181dbe8ae6dfcae74853c3466e64f372a692c2005138d454fa93668ceafa6b7628c62c98877b098656492dd63bfaebbfade8b1eb80a92830ad60f80b01f0

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks