General

  • Target

    62d3d6f833427d38154222304da51f201d999bec80f7283499d29b456858ef5e

  • Size

    899KB

  • Sample

    241114-vp365a1gnj

  • MD5

    592abcbc8d0b36baee085025802de04c

  • SHA1

    71e9bb8b52e1f3f010961213124273c6deb170a9

  • SHA256

    62d3d6f833427d38154222304da51f201d999bec80f7283499d29b456858ef5e

  • SHA512

    97c8539c7149ce883aafb5187d7a854cbbe8f4c5e209089297ab14e93e358c600a5126a3c0abe1a674486e77d52fff8aff94c729bbe31a364c34ad0250a4b40a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      62d3d6f833427d38154222304da51f201d999bec80f7283499d29b456858ef5e

    • Size

      899KB

    • MD5

      592abcbc8d0b36baee085025802de04c

    • SHA1

      71e9bb8b52e1f3f010961213124273c6deb170a9

    • SHA256

      62d3d6f833427d38154222304da51f201d999bec80f7283499d29b456858ef5e

    • SHA512

      97c8539c7149ce883aafb5187d7a854cbbe8f4c5e209089297ab14e93e358c600a5126a3c0abe1a674486e77d52fff8aff94c729bbe31a364c34ad0250a4b40a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks