General

  • Target

    96e9e1547cda1eb6d88f0c24da1c57ec6b8481e843c887f87e2c99d6caae2ab0

  • Size

    899KB

  • Sample

    241113-2n4jts1dlj

  • MD5

    202a09604d9132ddb48126e0882e316c

  • SHA1

    19b0e0c02377aa82b192a3e1bc3941c5a5123d93

  • SHA256

    96e9e1547cda1eb6d88f0c24da1c57ec6b8481e843c887f87e2c99d6caae2ab0

  • SHA512

    04f19a9274b27e09b134cf898d82f2f1dfb883a2073725e6f38f4d4ee54ba9c6b8c46ead554f9157a6485418ade1a4941a4ced8534215ec829b7e36a57110181

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      96e9e1547cda1eb6d88f0c24da1c57ec6b8481e843c887f87e2c99d6caae2ab0

    • Size

      899KB

    • MD5

      202a09604d9132ddb48126e0882e316c

    • SHA1

      19b0e0c02377aa82b192a3e1bc3941c5a5123d93

    • SHA256

      96e9e1547cda1eb6d88f0c24da1c57ec6b8481e843c887f87e2c99d6caae2ab0

    • SHA512

      04f19a9274b27e09b134cf898d82f2f1dfb883a2073725e6f38f4d4ee54ba9c6b8c46ead554f9157a6485418ade1a4941a4ced8534215ec829b7e36a57110181

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks