General

  • Target

    a82d97631f36e72cb13ee770d87d1e1fccecd95d8af26f1d9492f6d7b5e1e0d4

  • Size

    899KB

  • Sample

    241112-lj2axaymcs

  • MD5

    75ca77bfd09932489f8e4b3bbb422cee

  • SHA1

    1fa50741213d7c63263adb5e54427fa1d8e96c16

  • SHA256

    a82d97631f36e72cb13ee770d87d1e1fccecd95d8af26f1d9492f6d7b5e1e0d4

  • SHA512

    28e36f3e885ca84cea3f25726315444cb6c1028daf147e232955fc47b1b20cedfe1b598d37eb6bb2708d3889db69a892beeebc621daf5b7189c916c8f9e11952

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a82d97631f36e72cb13ee770d87d1e1fccecd95d8af26f1d9492f6d7b5e1e0d4

    • Size

      899KB

    • MD5

      75ca77bfd09932489f8e4b3bbb422cee

    • SHA1

      1fa50741213d7c63263adb5e54427fa1d8e96c16

    • SHA256

      a82d97631f36e72cb13ee770d87d1e1fccecd95d8af26f1d9492f6d7b5e1e0d4

    • SHA512

      28e36f3e885ca84cea3f25726315444cb6c1028daf147e232955fc47b1b20cedfe1b598d37eb6bb2708d3889db69a892beeebc621daf5b7189c916c8f9e11952

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks