General

  • Target

    1735029d03b8a410209b35ebe420ecd526c870758ef14707181f4753f0acc4ef

  • Size

    899KB

  • Sample

    241111-3yya8szelp

  • MD5

    be3c8bdd397551b94f57ea17d8e46c30

  • SHA1

    d7279c4b24e89423ce843ac8d52609c4a5beb3df

  • SHA256

    1735029d03b8a410209b35ebe420ecd526c870758ef14707181f4753f0acc4ef

  • SHA512

    e522eb9e50ec7ea7d83d45467b8f798ca86fa12f768d6a394b55cac7b3888ffc4541da47efd739d2d8a9b7b9294e1dd3302f60bb10354a45b868cc463f2cecb9

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1735029d03b8a410209b35ebe420ecd526c870758ef14707181f4753f0acc4ef

    • Size

      899KB

    • MD5

      be3c8bdd397551b94f57ea17d8e46c30

    • SHA1

      d7279c4b24e89423ce843ac8d52609c4a5beb3df

    • SHA256

      1735029d03b8a410209b35ebe420ecd526c870758ef14707181f4753f0acc4ef

    • SHA512

      e522eb9e50ec7ea7d83d45467b8f798ca86fa12f768d6a394b55cac7b3888ffc4541da47efd739d2d8a9b7b9294e1dd3302f60bb10354a45b868cc463f2cecb9

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks