General

  • Target

    2b9d8f6b78ec8b93003aaec578cdcfed9479e2a2cdf7e7e2dec551f8790de9cd

  • Size

    899KB

  • Sample

    241114-wqqg4a1hqf

  • MD5

    37744fd5e9c58aad44ff08bd30f3c7e1

  • SHA1

    e128e133890237082ca451f0dc17e757bee22a4e

  • SHA256

    2b9d8f6b78ec8b93003aaec578cdcfed9479e2a2cdf7e7e2dec551f8790de9cd

  • SHA512

    269c48d31a423562537790bf51764d09ef31edc604a87fa4d96eb9f5f3d63cceaaa2a2a0c9dee53c32d47b513781981e36a72ef47abf562952656d9eeda9c003

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2b9d8f6b78ec8b93003aaec578cdcfed9479e2a2cdf7e7e2dec551f8790de9cd

    • Size

      899KB

    • MD5

      37744fd5e9c58aad44ff08bd30f3c7e1

    • SHA1

      e128e133890237082ca451f0dc17e757bee22a4e

    • SHA256

      2b9d8f6b78ec8b93003aaec578cdcfed9479e2a2cdf7e7e2dec551f8790de9cd

    • SHA512

      269c48d31a423562537790bf51764d09ef31edc604a87fa4d96eb9f5f3d63cceaaa2a2a0c9dee53c32d47b513781981e36a72ef47abf562952656d9eeda9c003

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks