General

  • Target

    e777cec5b6c1dcb90acdbd2695d06ad3614b27bd09c4783c3c2c2212f3376705

  • Size

    899KB

  • Sample

    241114-ah91wa1hpb

  • MD5

    d232b1308cef1793e64372620512db55

  • SHA1

    e65407492180384d0af503d94cc4843caa10f1c6

  • SHA256

    e777cec5b6c1dcb90acdbd2695d06ad3614b27bd09c4783c3c2c2212f3376705

  • SHA512

    fa5992c7241063b6d5ee38837bb473982804bc911d1d9f2abf2e024a131bbd8c686267dbc1eb9fdd4556a476d2a687975ccf3523ceba100d9c76b147cc0a3def

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      e777cec5b6c1dcb90acdbd2695d06ad3614b27bd09c4783c3c2c2212f3376705

    • Size

      899KB

    • MD5

      d232b1308cef1793e64372620512db55

    • SHA1

      e65407492180384d0af503d94cc4843caa10f1c6

    • SHA256

      e777cec5b6c1dcb90acdbd2695d06ad3614b27bd09c4783c3c2c2212f3376705

    • SHA512

      fa5992c7241063b6d5ee38837bb473982804bc911d1d9f2abf2e024a131bbd8c686267dbc1eb9fdd4556a476d2a687975ccf3523ceba100d9c76b147cc0a3def

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks