General

  • Target

    5a81ba55bcd635f785c4a90ad12d17660fe5e062e1a8428819f1f8040040de0e

  • Size

    899KB

  • Sample

    240509-mhek7ach6t

  • MD5

    c78d0a8e57f6bc68242ec9fb344ada9a

  • SHA1

    ec71d6a7db8554b8042b89d4ef0f60ed875d6bf9

  • SHA256

    5a81ba55bcd635f785c4a90ad12d17660fe5e062e1a8428819f1f8040040de0e

  • SHA512

    d8d1c514fd78ff422cb40ff1731dd69952c89420d4a1929cd6b63ddccd3dd86dbf05a1362e8c1fb94430f49f15b00066b2690e31a006023c03139014fce9da5f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXV:7wqd87VV

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5a81ba55bcd635f785c4a90ad12d17660fe5e062e1a8428819f1f8040040de0e

    • Size

      899KB

    • MD5

      c78d0a8e57f6bc68242ec9fb344ada9a

    • SHA1

      ec71d6a7db8554b8042b89d4ef0f60ed875d6bf9

    • SHA256

      5a81ba55bcd635f785c4a90ad12d17660fe5e062e1a8428819f1f8040040de0e

    • SHA512

      d8d1c514fd78ff422cb40ff1731dd69952c89420d4a1929cd6b63ddccd3dd86dbf05a1362e8c1fb94430f49f15b00066b2690e31a006023c03139014fce9da5f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXV:7wqd87VV

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks