General

  • Target

    3c195697922279fd6da7413269738cce91b92fe9f74849f37e31636cec950d41

  • Size

    899KB

  • Sample

    250405-bxtg4sxxcy

  • MD5

    aeb8436a921f4c6f2f4519a1a1334c7d

  • SHA1

    1a3d96313f2394f0e6076f876caa05be6e71e9bc

  • SHA256

    3c195697922279fd6da7413269738cce91b92fe9f74849f37e31636cec950d41

  • SHA512

    fbf4eedaaeccfae0121ad6c0a6efc70e1638a127a8c461574550d77fbfe97ee6af7ff8fa42f1c1994bf8f8a528c9c0651b8552274237a7c20eda74a3aee7bfa2

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3c195697922279fd6da7413269738cce91b92fe9f74849f37e31636cec950d41

    • Size

      899KB

    • MD5

      aeb8436a921f4c6f2f4519a1a1334c7d

    • SHA1

      1a3d96313f2394f0e6076f876caa05be6e71e9bc

    • SHA256

      3c195697922279fd6da7413269738cce91b92fe9f74849f37e31636cec950d41

    • SHA512

      fbf4eedaaeccfae0121ad6c0a6efc70e1638a127a8c461574550d77fbfe97ee6af7ff8fa42f1c1994bf8f8a528c9c0651b8552274237a7c20eda74a3aee7bfa2

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks