General

  • Target

    c6a3f869a3cb2a8b2bdf5e20d879850430c4de8c3fa421cda3f873bf6a58b711

  • Size

    49KB

  • Sample

    250301-yt1hks1kt7

  • MD5

    afcb9fdf19ca6015c1a2c98fef852661

  • SHA1

    3e19f81092c578b411e96cda335e880cb388e067

  • SHA256

    c6a3f869a3cb2a8b2bdf5e20d879850430c4de8c3fa421cda3f873bf6a58b711

  • SHA512

    9c037d0cf7a11666776ddfb42e774d1be4ccd3cdfb794fa052922fb71e146b9c136b16370ab3922dd238d98de156a667e735fc8214aeff476ff68c56c7f2db9b

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO+JYHB9ElHS:Cn7zBjPp1H9ovoDa/gJBJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      c6a3f869a3cb2a8b2bdf5e20d879850430c4de8c3fa421cda3f873bf6a58b711

    • Size

      49KB

    • MD5

      afcb9fdf19ca6015c1a2c98fef852661

    • SHA1

      3e19f81092c578b411e96cda335e880cb388e067

    • SHA256

      c6a3f869a3cb2a8b2bdf5e20d879850430c4de8c3fa421cda3f873bf6a58b711

    • SHA512

      9c037d0cf7a11666776ddfb42e774d1be4ccd3cdfb794fa052922fb71e146b9c136b16370ab3922dd238d98de156a667e735fc8214aeff476ff68c56c7f2db9b

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO+JYHB9ElHS:Cn7zBjPp1H9ovoDa/gJBJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks