General

  • Target

    524573c5573bd21a9ed273de6655f8705bff9319db1da53930a2ce5c341c8c61

  • Size

    899KB

  • Sample

    241231-wbjq1atpen

  • MD5

    615e7e12e86fb8462183ad862940042a

  • SHA1

    061d40c7c58d6e98edf3c7a34d9f25b6ddca0bbf

  • SHA256

    524573c5573bd21a9ed273de6655f8705bff9319db1da53930a2ce5c341c8c61

  • SHA512

    1c805d6796fe20f2d8ca94b758a82dd4b2d03feb284cf56ea9cf90a8ece3171fa0c1860df1e01b1337268fd70a56805ab400087ec27e6ce4cc568cdbc049f882

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      524573c5573bd21a9ed273de6655f8705bff9319db1da53930a2ce5c341c8c61

    • Size

      899KB

    • MD5

      615e7e12e86fb8462183ad862940042a

    • SHA1

      061d40c7c58d6e98edf3c7a34d9f25b6ddca0bbf

    • SHA256

      524573c5573bd21a9ed273de6655f8705bff9319db1da53930a2ce5c341c8c61

    • SHA512

      1c805d6796fe20f2d8ca94b758a82dd4b2d03feb284cf56ea9cf90a8ece3171fa0c1860df1e01b1337268fd70a56805ab400087ec27e6ce4cc568cdbc049f882

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks