General

  • Target

    b694433955709b856febfa357c64d922613e8139196cbb9996147cea8a0a0c3f

  • Size

    899KB

  • Sample

    250306-dzxcwswzey

  • MD5

    f0fcc99f6d23ad9fc25e1853e539c6bd

  • SHA1

    b9ba194d9ea67ca51f274d7f6df3b911e1340d94

  • SHA256

    b694433955709b856febfa357c64d922613e8139196cbb9996147cea8a0a0c3f

  • SHA512

    2e99206117be2ca869c993cf42fd6a25a69cdba9a9d8f1489f3edf0874a50511c7c9da3fc690cb5eadb444b79f00e013cd4d4b52890a5326750bf267188d969a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX7:7wqd87V7

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b694433955709b856febfa357c64d922613e8139196cbb9996147cea8a0a0c3f

    • Size

      899KB

    • MD5

      f0fcc99f6d23ad9fc25e1853e539c6bd

    • SHA1

      b9ba194d9ea67ca51f274d7f6df3b911e1340d94

    • SHA256

      b694433955709b856febfa357c64d922613e8139196cbb9996147cea8a0a0c3f

    • SHA512

      2e99206117be2ca869c993cf42fd6a25a69cdba9a9d8f1489f3edf0874a50511c7c9da3fc690cb5eadb444b79f00e013cd4d4b52890a5326750bf267188d969a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX7:7wqd87V7

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks