General

  • Target

    4f8e087c69af81a2229633a1fd5a9ba8e19edb7e927d2c328debe0bb30bc84c7

  • Size

    50KB

  • Sample

    241230-s44ebsymbp

  • MD5

    b420fdc990900f855437e7d0aba1e349

  • SHA1

    9af111975e5efef591ecfeba12818c04eecb9e52

  • SHA256

    4f8e087c69af81a2229633a1fd5a9ba8e19edb7e927d2c328debe0bb30bc84c7

  • SHA512

    cc6f56c375c3864da1ccc8547075e6d473c38369d07da117e4ce86638510f038d7888e028dc8042f2e80edcd64db10a6ba1492f735255450bb49cf42874e67cc

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5TJYH:W5ReWjTrW9rNPgYoZJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4f8e087c69af81a2229633a1fd5a9ba8e19edb7e927d2c328debe0bb30bc84c7

    • Size

      50KB

    • MD5

      b420fdc990900f855437e7d0aba1e349

    • SHA1

      9af111975e5efef591ecfeba12818c04eecb9e52

    • SHA256

      4f8e087c69af81a2229633a1fd5a9ba8e19edb7e927d2c328debe0bb30bc84c7

    • SHA512

      cc6f56c375c3864da1ccc8547075e6d473c38369d07da117e4ce86638510f038d7888e028dc8042f2e80edcd64db10a6ba1492f735255450bb49cf42874e67cc

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5TJYH:W5ReWjTrW9rNPgYoZJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks