General

  • Target

    3e9a27ab25dd69d705b9aba6f1ca1b23cbee9b406b4d172c6d33cc5ea17b7408

  • Size

    899KB

  • Sample

    241114-wn6ras1hpa

  • MD5

    b05ce714fe68b729eeb8370844071193

  • SHA1

    ec7e48354104c64985f999c9d36195c63665c9f3

  • SHA256

    3e9a27ab25dd69d705b9aba6f1ca1b23cbee9b406b4d172c6d33cc5ea17b7408

  • SHA512

    0c1e58dc0a800df3322ae495858de3e00acd68b539cb64e327f75268ee48fda588d768bb7a058abd3bbb57bf73653606ee5eeed51e4b0395aafb5bc8e2b4c3ca

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXu:7wqd87Vu

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3e9a27ab25dd69d705b9aba6f1ca1b23cbee9b406b4d172c6d33cc5ea17b7408

    • Size

      899KB

    • MD5

      b05ce714fe68b729eeb8370844071193

    • SHA1

      ec7e48354104c64985f999c9d36195c63665c9f3

    • SHA256

      3e9a27ab25dd69d705b9aba6f1ca1b23cbee9b406b4d172c6d33cc5ea17b7408

    • SHA512

      0c1e58dc0a800df3322ae495858de3e00acd68b539cb64e327f75268ee48fda588d768bb7a058abd3bbb57bf73653606ee5eeed51e4b0395aafb5bc8e2b4c3ca

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXu:7wqd87Vu

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks