General

  • Target

    d653f3687d6d53f99d0566e1509989a7724ae47e72d1c5bb2c2202ef54b6122c

  • Size

    899KB

  • Sample

    241111-3xjfpazdrp

  • MD5

    596705440943e064d6b852d37e99d500

  • SHA1

    d62f3f5dd5489209d3b392ef2f01c2277b4138f1

  • SHA256

    d653f3687d6d53f99d0566e1509989a7724ae47e72d1c5bb2c2202ef54b6122c

  • SHA512

    7de1758bb9f988b6d3546cc6699d76f9619139a909a8c2caf3dbfb2dd948e116eb183a5fe0bb000b2ecc247999459222137a9bd6e1b809d04e5fa767488d03a3

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXo:7wqd87Vo

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d653f3687d6d53f99d0566e1509989a7724ae47e72d1c5bb2c2202ef54b6122c

    • Size

      899KB

    • MD5

      596705440943e064d6b852d37e99d500

    • SHA1

      d62f3f5dd5489209d3b392ef2f01c2277b4138f1

    • SHA256

      d653f3687d6d53f99d0566e1509989a7724ae47e72d1c5bb2c2202ef54b6122c

    • SHA512

      7de1758bb9f988b6d3546cc6699d76f9619139a909a8c2caf3dbfb2dd948e116eb183a5fe0bb000b2ecc247999459222137a9bd6e1b809d04e5fa767488d03a3

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXo:7wqd87Vo

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks