General

  • Target

    ba52d11c0719ee999f661232c37170d6760898de73f78798e17c1cb5772797f2

  • Size

    899KB

  • Sample

    241114-vtswys1gmc

  • MD5

    06d34613728dcf57451843d4e3b96a4f

  • SHA1

    a9246f5286b37ccd8d52f359c5729d651ff4b730

  • SHA256

    ba52d11c0719ee999f661232c37170d6760898de73f78798e17c1cb5772797f2

  • SHA512

    3043dd21e7f2fdc811da44c47f39b26954e0a155056d7402d5bd76697e8c78b0e5d28e69865d566c2d2327ded0ab53348a350723ea45a47377c51b6db754f7c2

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ba52d11c0719ee999f661232c37170d6760898de73f78798e17c1cb5772797f2

    • Size

      899KB

    • MD5

      06d34613728dcf57451843d4e3b96a4f

    • SHA1

      a9246f5286b37ccd8d52f359c5729d651ff4b730

    • SHA256

      ba52d11c0719ee999f661232c37170d6760898de73f78798e17c1cb5772797f2

    • SHA512

      3043dd21e7f2fdc811da44c47f39b26954e0a155056d7402d5bd76697e8c78b0e5d28e69865d566c2d2327ded0ab53348a350723ea45a47377c51b6db754f7c2

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks