General

  • Target

    b56015fc1223e254a0319d1b7c8c710f3dffa584308566492c153d8220b0353e

  • Size

    899KB

  • Sample

    241111-b78d1syphz

  • MD5

    e7e27e61cea1f74145c7b1b7aa70163a

  • SHA1

    2171d011bd0604ad0e061021e13355ef4f9787a0

  • SHA256

    b56015fc1223e254a0319d1b7c8c710f3dffa584308566492c153d8220b0353e

  • SHA512

    5670d788b9a27fc62da107e19ce166278684d0d98c6d94d3c56742ea080470a3d776af7163f1b36c0ed494aad6812ed3ab04ab94fe0c63311a857fdaf5a4151b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b56015fc1223e254a0319d1b7c8c710f3dffa584308566492c153d8220b0353e

    • Size

      899KB

    • MD5

      e7e27e61cea1f74145c7b1b7aa70163a

    • SHA1

      2171d011bd0604ad0e061021e13355ef4f9787a0

    • SHA256

      b56015fc1223e254a0319d1b7c8c710f3dffa584308566492c153d8220b0353e

    • SHA512

      5670d788b9a27fc62da107e19ce166278684d0d98c6d94d3c56742ea080470a3d776af7163f1b36c0ed494aad6812ed3ab04ab94fe0c63311a857fdaf5a4151b

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks