General

  • Target

    ccfd70a5216dde77c4062d9342cc2fdb47e68615c356a1696f6dbc4d52d3a7b3

  • Size

    50KB

  • Sample

    241114-btqbaawlbl

  • MD5

    de49fd0424e2399cd2e1d5ad195bb9c1

  • SHA1

    aaf87ce92122c95921d0dd21f66b8d60436a6f5f

  • SHA256

    ccfd70a5216dde77c4062d9342cc2fdb47e68615c356a1696f6dbc4d52d3a7b3

  • SHA512

    366894e881c20ba8256f01b174a786c0d3a65b3e66b2db3b64b4898ba52d3050854fb6e378c140418b60c149aca74521dc3e546c17b831c6218ac5d5c96f8c79

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5EJYH:W5ReWjTrW9rNPgYoyJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ccfd70a5216dde77c4062d9342cc2fdb47e68615c356a1696f6dbc4d52d3a7b3

    • Size

      50KB

    • MD5

      de49fd0424e2399cd2e1d5ad195bb9c1

    • SHA1

      aaf87ce92122c95921d0dd21f66b8d60436a6f5f

    • SHA256

      ccfd70a5216dde77c4062d9342cc2fdb47e68615c356a1696f6dbc4d52d3a7b3

    • SHA512

      366894e881c20ba8256f01b174a786c0d3a65b3e66b2db3b64b4898ba52d3050854fb6e378c140418b60c149aca74521dc3e546c17b831c6218ac5d5c96f8c79

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5EJYH:W5ReWjTrW9rNPgYoyJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks