General

  • Target

    7b9d6c590ed7d679468403b224c215cc1cd68c5f10788e8a60fcfcd4e103cd87

  • Size

    899KB

  • Sample

    241114-vqak7svmgn

  • MD5

    d86d8829a5388d1718137356272de2c9

  • SHA1

    b9dfe03ffa204634012965f42936115a322005ef

  • SHA256

    7b9d6c590ed7d679468403b224c215cc1cd68c5f10788e8a60fcfcd4e103cd87

  • SHA512

    cad93e7c710bb2b4fc1a587d8de41ec5527b9db9768f63e473e1626b9983d90a57273ffd8a80172bfef96571003a863520249b04337cd1ab51693815e6a4999f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7b9d6c590ed7d679468403b224c215cc1cd68c5f10788e8a60fcfcd4e103cd87

    • Size

      899KB

    • MD5

      d86d8829a5388d1718137356272de2c9

    • SHA1

      b9dfe03ffa204634012965f42936115a322005ef

    • SHA256

      7b9d6c590ed7d679468403b224c215cc1cd68c5f10788e8a60fcfcd4e103cd87

    • SHA512

      cad93e7c710bb2b4fc1a587d8de41ec5527b9db9768f63e473e1626b9983d90a57273ffd8a80172bfef96571003a863520249b04337cd1ab51693815e6a4999f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks