General

  • Target

    fb1005ec45420f2caa758d43b993a450df1de42ea6ae980eea31c94140271130

  • Size

    899KB

  • Sample

    241113-3raats1jbs

  • MD5

    e82757a277259ab29c10b0180b632dcb

  • SHA1

    279f9179211874200db6ec69907af5aa4152be31

  • SHA256

    fb1005ec45420f2caa758d43b993a450df1de42ea6ae980eea31c94140271130

  • SHA512

    bc785517ead1ebff89b7a9173f4c6e18e13568efdec7e9014b4591cbe036e3ccc9e40ae432b52242b110440bae92b1d5c09a648d3064cda7357943c9f492514e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXu:7wqd87Vu

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fb1005ec45420f2caa758d43b993a450df1de42ea6ae980eea31c94140271130

    • Size

      899KB

    • MD5

      e82757a277259ab29c10b0180b632dcb

    • SHA1

      279f9179211874200db6ec69907af5aa4152be31

    • SHA256

      fb1005ec45420f2caa758d43b993a450df1de42ea6ae980eea31c94140271130

    • SHA512

      bc785517ead1ebff89b7a9173f4c6e18e13568efdec7e9014b4591cbe036e3ccc9e40ae432b52242b110440bae92b1d5c09a648d3064cda7357943c9f492514e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXu:7wqd87Vu

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks