General

  • Target

    f87675fc17d53a57199f1119e807fdac053fdec7a4537bdc2eb59d9e31e068f9

  • Size

    49KB

  • Sample

    241231-xhkgjswnej

  • MD5

    26f06dfa15362bcd7d26929e5c045e25

  • SHA1

    c496f7fb9b03547a53e6561e57b4c21af8b072f9

  • SHA256

    f87675fc17d53a57199f1119e807fdac053fdec7a4537bdc2eb59d9e31e068f9

  • SHA512

    05ecfbdbca1c2fb5c007f0e1869709838b67e66f40c324049fbb5fb1b8f68760383042f3e39930a462b53090c474ae6355896712e070cde45f2582f4bc11f82f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOQJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJbJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      f87675fc17d53a57199f1119e807fdac053fdec7a4537bdc2eb59d9e31e068f9

    • Size

      49KB

    • MD5

      26f06dfa15362bcd7d26929e5c045e25

    • SHA1

      c496f7fb9b03547a53e6561e57b4c21af8b072f9

    • SHA256

      f87675fc17d53a57199f1119e807fdac053fdec7a4537bdc2eb59d9e31e068f9

    • SHA512

      05ecfbdbca1c2fb5c007f0e1869709838b67e66f40c324049fbb5fb1b8f68760383042f3e39930a462b53090c474ae6355896712e070cde45f2582f4bc11f82f

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOQJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJbJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks