General

  • Target

    87c3523a8aedafb7f9385f6727aac179082865bdb69e32e652e85095c8a150cc

  • Size

    899KB

  • Sample

    241114-wpbyba1hpc

  • MD5

    7ba203bb74d576f2e9b1a7c5726df935

  • SHA1

    4b258afbc9cb901441c3dae53a42782ff9a68477

  • SHA256

    87c3523a8aedafb7f9385f6727aac179082865bdb69e32e652e85095c8a150cc

  • SHA512

    878e8930021b3cb150492a4e22238601711354ba4f64c2fc99b06870e83d10663c7f585d549924734c243f9297ea4fae56604d9ca645c6fca23dba8e957d3ca6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXG:7wqd87VG

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      87c3523a8aedafb7f9385f6727aac179082865bdb69e32e652e85095c8a150cc

    • Size

      899KB

    • MD5

      7ba203bb74d576f2e9b1a7c5726df935

    • SHA1

      4b258afbc9cb901441c3dae53a42782ff9a68477

    • SHA256

      87c3523a8aedafb7f9385f6727aac179082865bdb69e32e652e85095c8a150cc

    • SHA512

      878e8930021b3cb150492a4e22238601711354ba4f64c2fc99b06870e83d10663c7f585d549924734c243f9297ea4fae56604d9ca645c6fca23dba8e957d3ca6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXG:7wqd87VG

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks