General

  • Target

    7512e3a4132eb34704c0fa44f2fdd18bf5b0c7b11783c33ebbedfcb3aac651e7

  • Size

    49KB

  • Sample

    241114-yttd9ssepg

  • MD5

    710481c535f1ad840077517ff2d86080

  • SHA1

    0c4ce3af5614148fac7f8314a78d16dda45a1a7b

  • SHA256

    7512e3a4132eb34704c0fa44f2fdd18bf5b0c7b11783c33ebbedfcb3aac651e7

  • SHA512

    758eec844746ef3128d5ffd72f3eb0a9b8511fde84612fd97af9376b4fa97aeaf04a2fcc18760c296742c4b169d00b84cbf17722868fa86a8c254b2453d4e36d

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOtJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJWJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      7512e3a4132eb34704c0fa44f2fdd18bf5b0c7b11783c33ebbedfcb3aac651e7

    • Size

      49KB

    • MD5

      710481c535f1ad840077517ff2d86080

    • SHA1

      0c4ce3af5614148fac7f8314a78d16dda45a1a7b

    • SHA256

      7512e3a4132eb34704c0fa44f2fdd18bf5b0c7b11783c33ebbedfcb3aac651e7

    • SHA512

      758eec844746ef3128d5ffd72f3eb0a9b8511fde84612fd97af9376b4fa97aeaf04a2fcc18760c296742c4b169d00b84cbf17722868fa86a8c254b2453d4e36d

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOtJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJWJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks