General

  • Target

    83e34b0fddedab54aa2ffbbe6b0a72b8d7fe4b84a2e40300f016d2c48c236351

  • Size

    899KB

  • Sample

    241114-ajbjpsvpck

  • MD5

    975230d395e151a060d54f8b59841e87

  • SHA1

    e8fe3eef2d73028e30a1d53f45c3ebc2017a9175

  • SHA256

    83e34b0fddedab54aa2ffbbe6b0a72b8d7fe4b84a2e40300f016d2c48c236351

  • SHA512

    f700c3d8c5e39a607a999dfc1f4359bf092406f0959e9feae4c94cb838b6b50eb42bb9fd88cb1d9b1d8724cdc72261ac848bd37c3063be3984069d93a2cfd895

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      83e34b0fddedab54aa2ffbbe6b0a72b8d7fe4b84a2e40300f016d2c48c236351

    • Size

      899KB

    • MD5

      975230d395e151a060d54f8b59841e87

    • SHA1

      e8fe3eef2d73028e30a1d53f45c3ebc2017a9175

    • SHA256

      83e34b0fddedab54aa2ffbbe6b0a72b8d7fe4b84a2e40300f016d2c48c236351

    • SHA512

      f700c3d8c5e39a607a999dfc1f4359bf092406f0959e9feae4c94cb838b6b50eb42bb9fd88cb1d9b1d8724cdc72261ac848bd37c3063be3984069d93a2cfd895

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks