General

  • Target

    90cfcafb1e5b3afad2a8f02a1a6cd304e68920e926066c1e51d3f61270d77ebd

  • Size

    899KB

  • Sample

    250310-dtdnla1vct

  • MD5

    d279dd865bd9e755c6393bb7d1adf1f9

  • SHA1

    a7ee0e0006c5f68dfb72d880271b92a926e6a549

  • SHA256

    90cfcafb1e5b3afad2a8f02a1a6cd304e68920e926066c1e51d3f61270d77ebd

  • SHA512

    70b836194498e4c5af4341962ad90371ed172537db7e1c1016eb7709cf7d1a86966ad9339349916c44c1dd3e1599d3aa6f19f3aabaa07a31c984597cedde362a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      90cfcafb1e5b3afad2a8f02a1a6cd304e68920e926066c1e51d3f61270d77ebd

    • Size

      899KB

    • MD5

      d279dd865bd9e755c6393bb7d1adf1f9

    • SHA1

      a7ee0e0006c5f68dfb72d880271b92a926e6a549

    • SHA256

      90cfcafb1e5b3afad2a8f02a1a6cd304e68920e926066c1e51d3f61270d77ebd

    • SHA512

      70b836194498e4c5af4341962ad90371ed172537db7e1c1016eb7709cf7d1a86966ad9339349916c44c1dd3e1599d3aa6f19f3aabaa07a31c984597cedde362a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks