General

  • Target

    bec63aa6dcd5adde29cd20d4ec35ca4b9d489fdc610e3acce4095ef446ff3686

  • Size

    49KB

  • Sample

    241114-ak7crssbkk

  • MD5

    ad6d57b15f1a21a76001458ca36c7697

  • SHA1

    455fe583297961d450bd52a3a270ec73e7d8d938

  • SHA256

    bec63aa6dcd5adde29cd20d4ec35ca4b9d489fdc610e3acce4095ef446ff3686

  • SHA512

    1fe2e8baac286bb78a8f92a33e5e8fca360e2989d1d65b022a09cfdca7042e93b6b01da4b97285d466d82df701c20fd51d1684b0a062bf318fe50506a1ea39a2

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO+JYHB9ElHS:Cn7zBjPp1H9ovoDa/gJBJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      bec63aa6dcd5adde29cd20d4ec35ca4b9d489fdc610e3acce4095ef446ff3686

    • Size

      49KB

    • MD5

      ad6d57b15f1a21a76001458ca36c7697

    • SHA1

      455fe583297961d450bd52a3a270ec73e7d8d938

    • SHA256

      bec63aa6dcd5adde29cd20d4ec35ca4b9d489fdc610e3acce4095ef446ff3686

    • SHA512

      1fe2e8baac286bb78a8f92a33e5e8fca360e2989d1d65b022a09cfdca7042e93b6b01da4b97285d466d82df701c20fd51d1684b0a062bf318fe50506a1ea39a2

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO+JYHB9ElHS:Cn7zBjPp1H9ovoDa/gJBJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks