General

  • Target

    a78cb5ad1a0b628a20e43703e364d13d89c2b322bd3cbbfac1b31799d4b0b2d7

  • Size

    899KB

  • Sample

    241113-3vz1na1fqe

  • MD5

    8639ad80b5c500c8438a955bd923e650

  • SHA1

    0170ef76fd94fba1546ca22d7178d9b637eeda41

  • SHA256

    a78cb5ad1a0b628a20e43703e364d13d89c2b322bd3cbbfac1b31799d4b0b2d7

  • SHA512

    b1ace8a89718f1bd7012ca2f8fd2708f6e7d319369fdb6c85a693065aeeff6949416f510b03fc98cbfffac834503343c3510a17291fbf668325dbfcbce887af6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a78cb5ad1a0b628a20e43703e364d13d89c2b322bd3cbbfac1b31799d4b0b2d7

    • Size

      899KB

    • MD5

      8639ad80b5c500c8438a955bd923e650

    • SHA1

      0170ef76fd94fba1546ca22d7178d9b637eeda41

    • SHA256

      a78cb5ad1a0b628a20e43703e364d13d89c2b322bd3cbbfac1b31799d4b0b2d7

    • SHA512

      b1ace8a89718f1bd7012ca2f8fd2708f6e7d319369fdb6c85a693065aeeff6949416f510b03fc98cbfffac834503343c3510a17291fbf668325dbfcbce887af6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks