General

  • Target

    11303399e0065335e08be4f5bc6486210e76488d44506f938db28635e013f0b2

  • Size

    899KB

  • Sample

    241111-a5996axrfx

  • MD5

    61dab720ceee4491a279a79c4dec8435

  • SHA1

    4f70ae01cf975c607c35346d44c4eaa85dbad006

  • SHA256

    11303399e0065335e08be4f5bc6486210e76488d44506f938db28635e013f0b2

  • SHA512

    c8d9db4c09931f55c5b20a8421a66ec6e247885307431956fb56be62826508197880ab28116d31272d0e64ebc769ac727514d4e8003e0736cea7e993f84605a0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXG:7wqd87VG

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      11303399e0065335e08be4f5bc6486210e76488d44506f938db28635e013f0b2

    • Size

      899KB

    • MD5

      61dab720ceee4491a279a79c4dec8435

    • SHA1

      4f70ae01cf975c607c35346d44c4eaa85dbad006

    • SHA256

      11303399e0065335e08be4f5bc6486210e76488d44506f938db28635e013f0b2

    • SHA512

      c8d9db4c09931f55c5b20a8421a66ec6e247885307431956fb56be62826508197880ab28116d31272d0e64ebc769ac727514d4e8003e0736cea7e993f84605a0

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXG:7wqd87VG

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks