General

  • Target

    d88cea0e3ea9ab881f0113781ec82601002ecd71c6b0e2c0ff8321d1c585815c

  • Size

    49KB

  • Sample

    241231-xdzexawlhm

  • MD5

    b96c6c2f3c4a2e5de7be046979ef43bf

  • SHA1

    653dcd51ce59ec5d671a6e6167b9dd7c14fbfcc2

  • SHA256

    d88cea0e3ea9ab881f0113781ec82601002ecd71c6b0e2c0ff8321d1c585815c

  • SHA512

    6e58c54e7c80bac136e16656b59aeb80c5ad45e70548c0afe664418727834523b29c8f3a8f303b62badc8229bce31c0fbc2b70b373c9e4b7bbd14638b9269ef2

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOaJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJxJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      d88cea0e3ea9ab881f0113781ec82601002ecd71c6b0e2c0ff8321d1c585815c

    • Size

      49KB

    • MD5

      b96c6c2f3c4a2e5de7be046979ef43bf

    • SHA1

      653dcd51ce59ec5d671a6e6167b9dd7c14fbfcc2

    • SHA256

      d88cea0e3ea9ab881f0113781ec82601002ecd71c6b0e2c0ff8321d1c585815c

    • SHA512

      6e58c54e7c80bac136e16656b59aeb80c5ad45e70548c0afe664418727834523b29c8f3a8f303b62badc8229bce31c0fbc2b70b373c9e4b7bbd14638b9269ef2

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOaJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJxJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks