General

  • Target

    bc424c2468ea39afb0522839eaccf1f65b84cf1a0657896e7874193cf20d1523

  • Size

    49KB

  • Sample

    250309-ybgmrayqs5

  • MD5

    6a049b622f95615339586510b54c5f8d

  • SHA1

    a0c0efb0dc6cd1b1624986679d8bd6429cb3530e

  • SHA256

    bc424c2468ea39afb0522839eaccf1f65b84cf1a0657896e7874193cf20d1523

  • SHA512

    74d53ef9bf7c208d8ea0a445dc5f7855c38070772832a6ccdfea4147c11ead756d41aa26645a7384a34d3a6bb89e78008395b6cfcf281ffb00e77f4ad071396a

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOvJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJQJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Targets

    • Target

      bc424c2468ea39afb0522839eaccf1f65b84cf1a0657896e7874193cf20d1523

    • Size

      49KB

    • MD5

      6a049b622f95615339586510b54c5f8d

    • SHA1

      a0c0efb0dc6cd1b1624986679d8bd6429cb3530e

    • SHA256

      bc424c2468ea39afb0522839eaccf1f65b84cf1a0657896e7874193cf20d1523

    • SHA512

      74d53ef9bf7c208d8ea0a445dc5f7855c38070772832a6ccdfea4147c11ead756d41aa26645a7384a34d3a6bb89e78008395b6cfcf281ffb00e77f4ad071396a

    • SSDEEP

      1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOvJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJQJYHBWZS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks