General

  • Target

    7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

  • Size

    49KB

  • Sample

    241111-t1a42s1hmf

  • MD5

    bb8bd1ba7439752e49760898a6196819

  • SHA1

    0ac0f61c3cb3642f107287059d7d8af59a72e948

  • SHA256

    7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

  • SHA512

    3689e5ee4fffc91e577edebab0f953e2ac1c92b268d57aa7185d2a1fd9c65f2a4461e5f98fbeaff564ef1e3a61ccf570843a60256da8f69540e433464dae925f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOkJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJrJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

    • Size

      49KB

    • MD5

      bb8bd1ba7439752e49760898a6196819

    • SHA1

      0ac0f61c3cb3642f107287059d7d8af59a72e948

    • SHA256

      7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

    • SHA512

      3689e5ee4fffc91e577edebab0f953e2ac1c92b268d57aa7185d2a1fd9c65f2a4461e5f98fbeaff564ef1e3a61ccf570843a60256da8f69540e433464dae925f

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOkJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJrJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks