General

  • Target

    33ca969a92d708f9a6cf65304a543b1543bc9f4bcbb92017c4113def1f051968

  • Size

    50KB

  • Sample

    241114-dh7sastenn

  • MD5

    acd2f0b9751533e922b4f0b264fd8e2e

  • SHA1

    b60992632d51c8affbe478d0ddbe9496c7e8487b

  • SHA256

    33ca969a92d708f9a6cf65304a543b1543bc9f4bcbb92017c4113def1f051968

  • SHA512

    794f13e981b88472e8cecff74233a63f0d02df16e742a56025465fd5e9dff2a8d4488c24115fbe0c7a17669a2e04e73ea9fefe10325f0fbd9f9c833209989513

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5jJYH:W5ReWjTrW9rNPgYodJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      33ca969a92d708f9a6cf65304a543b1543bc9f4bcbb92017c4113def1f051968

    • Size

      50KB

    • MD5

      acd2f0b9751533e922b4f0b264fd8e2e

    • SHA1

      b60992632d51c8affbe478d0ddbe9496c7e8487b

    • SHA256

      33ca969a92d708f9a6cf65304a543b1543bc9f4bcbb92017c4113def1f051968

    • SHA512

      794f13e981b88472e8cecff74233a63f0d02df16e742a56025465fd5e9dff2a8d4488c24115fbe0c7a17669a2e04e73ea9fefe10325f0fbd9f9c833209989513

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5jJYH:W5ReWjTrW9rNPgYodJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks