General

  • Target

    a34678a692b7e80c71dc9c38b19ca955f94e7ee5c8a32da9a933639ff6a8a778

  • Size

    899KB

  • Sample

    250306-dzl7xswzd1

  • MD5

    967223b2a09d418063f5906b6de329b0

  • SHA1

    4d7cb4bf213db7c663fef0147ab7edbfe149ccf2

  • SHA256

    a34678a692b7e80c71dc9c38b19ca955f94e7ee5c8a32da9a933639ff6a8a778

  • SHA512

    3dac4a980648812dc406ca57714572fbff923e290485e2773c153af69f704284b6e8f29cf65905339639b4a782425e216743f79cc3254c6bcf595bd6d64c23ba

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a34678a692b7e80c71dc9c38b19ca955f94e7ee5c8a32da9a933639ff6a8a778

    • Size

      899KB

    • MD5

      967223b2a09d418063f5906b6de329b0

    • SHA1

      4d7cb4bf213db7c663fef0147ab7edbfe149ccf2

    • SHA256

      a34678a692b7e80c71dc9c38b19ca955f94e7ee5c8a32da9a933639ff6a8a778

    • SHA512

      3dac4a980648812dc406ca57714572fbff923e290485e2773c153af69f704284b6e8f29cf65905339639b4a782425e216743f79cc3254c6bcf595bd6d64c23ba

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks