General

  • Target

    ac5a2af53b9536ef82df86068d184fff68bb842b9686e0e01af6568e65ee7736

  • Size

    899KB

  • Sample

    241119-vhm7bsycqh

  • MD5

    a31b740c67d8cb02d24186af00673a83

  • SHA1

    b29dece43cab3bb14354b8cafe6ad99b6eb5fa44

  • SHA256

    ac5a2af53b9536ef82df86068d184fff68bb842b9686e0e01af6568e65ee7736

  • SHA512

    b98133cf53079f77e1efdc121d4b9b295db217ec75773eb27633ac2142d9e3e112eefcbce2d7b008fa38b5fbb834e9b936123a2e1ffe323a2094c9a73abd2a4f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX1:7wqd87V1

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ac5a2af53b9536ef82df86068d184fff68bb842b9686e0e01af6568e65ee7736

    • Size

      899KB

    • MD5

      a31b740c67d8cb02d24186af00673a83

    • SHA1

      b29dece43cab3bb14354b8cafe6ad99b6eb5fa44

    • SHA256

      ac5a2af53b9536ef82df86068d184fff68bb842b9686e0e01af6568e65ee7736

    • SHA512

      b98133cf53079f77e1efdc121d4b9b295db217ec75773eb27633ac2142d9e3e112eefcbce2d7b008fa38b5fbb834e9b936123a2e1ffe323a2094c9a73abd2a4f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX1:7wqd87V1

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks