General

  • Target

    2e3ff34f4e901e7a004b6cc8197d92070220b01903389b21831cc6ea86231a83

  • Size

    899KB

  • Sample

    250309-jfv9dayxcw

  • MD5

    1ac7e9d634c420ae44ea7e65032f2572

  • SHA1

    f4fa1e990e3761e4cea3832fbc427ee7dae153ac

  • SHA256

    2e3ff34f4e901e7a004b6cc8197d92070220b01903389b21831cc6ea86231a83

  • SHA512

    c911a18798afd5459ab02c0796b6fc15ef9c46357d815639c45e060159b741c5fb3acd1a0a87808863eb84be9a73cb453c029c9cc3e0e545082f138cf284302b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2e3ff34f4e901e7a004b6cc8197d92070220b01903389b21831cc6ea86231a83

    • Size

      899KB

    • MD5

      1ac7e9d634c420ae44ea7e65032f2572

    • SHA1

      f4fa1e990e3761e4cea3832fbc427ee7dae153ac

    • SHA256

      2e3ff34f4e901e7a004b6cc8197d92070220b01903389b21831cc6ea86231a83

    • SHA512

      c911a18798afd5459ab02c0796b6fc15ef9c46357d815639c45e060159b741c5fb3acd1a0a87808863eb84be9a73cb453c029c9cc3e0e545082f138cf284302b

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks