General

  • Target

    9e7f1af69f7d2206643585dfcbba16a96892887c0a2fe816b1aa239052209b73

  • Size

    899KB

  • Sample

    241114-aasrma1gpd

  • MD5

    dbaebe500de70f03074a1320e540c15b

  • SHA1

    0bb67a7c7310d794d5c495f615d8f56b3606af11

  • SHA256

    9e7f1af69f7d2206643585dfcbba16a96892887c0a2fe816b1aa239052209b73

  • SHA512

    fd7c7956e04d6eddc8e85c746d06ab382a1edca64a0db631f0665784e29c567df9284378235d461b8a9640f006eef4b395d0860cbd62b31744752bf5de2b03a1

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      9e7f1af69f7d2206643585dfcbba16a96892887c0a2fe816b1aa239052209b73

    • Size

      899KB

    • MD5

      dbaebe500de70f03074a1320e540c15b

    • SHA1

      0bb67a7c7310d794d5c495f615d8f56b3606af11

    • SHA256

      9e7f1af69f7d2206643585dfcbba16a96892887c0a2fe816b1aa239052209b73

    • SHA512

      fd7c7956e04d6eddc8e85c746d06ab382a1edca64a0db631f0665784e29c567df9284378235d461b8a9640f006eef4b395d0860cbd62b31744752bf5de2b03a1

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks