General

  • Target

    50f9ef648765a475b0bb0558f7a9b11de42d005e5106023e1f6a75a735f79705

  • Size

    336KB

  • Sample

    250128-wkxn8awrg1

  • MD5

    d3f37b69a856cea23f2e5e975904c83e

  • SHA1

    6431fa327adf57349eee5668ddf15f5814b93b96

  • SHA256

    50f9ef648765a475b0bb0558f7a9b11de42d005e5106023e1f6a75a735f79705

  • SHA512

    944051361fd93c20b1c844fa10299cc5c95185969a2d0a5bbd4c35d9d0ffacabfdcfda57b8b7a765832e0af70a120f776e7bc4660d7c176c9418f2d94c77f9b9

  • SSDEEP

    1536:yioiq7x9oZgyKKYA/ZK05Ag5tAiDlhE7iGVVPTO8nfCZV1k46UjDSNlZl+7cw:KiqgvKgm45EWWdfnaZf1n4lEl

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

43.251.16.206

Targets

    • Target

      50f9ef648765a475b0bb0558f7a9b11de42d005e5106023e1f6a75a735f79705

    • Size

      336KB

    • MD5

      d3f37b69a856cea23f2e5e975904c83e

    • SHA1

      6431fa327adf57349eee5668ddf15f5814b93b96

    • SHA256

      50f9ef648765a475b0bb0558f7a9b11de42d005e5106023e1f6a75a735f79705

    • SHA512

      944051361fd93c20b1c844fa10299cc5c95185969a2d0a5bbd4c35d9d0ffacabfdcfda57b8b7a765832e0af70a120f776e7bc4660d7c176c9418f2d94c77f9b9

    • SSDEEP

      1536:yioiq7x9oZgyKKYA/ZK05Ag5tAiDlhE7iGVVPTO8nfCZV1k46UjDSNlZl+7cw:KiqgvKgm45EWWdfnaZf1n4lEl

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks