General

  • Target

    5e96008e191e7d957912c604e39fe7111a1f01ca778395944bce2d3056c8f229

  • Size

    50KB

  • Sample

    240510-peqv6adf6s

  • MD5

    3e06db34430745198bd5bceb692dfd93

  • SHA1

    275e48808322ef42a6afa79e44f38ee9b2505cac

  • SHA256

    5e96008e191e7d957912c604e39fe7111a1f01ca778395944bce2d3056c8f229

  • SHA512

    14d73cd5b7e45ed37d9684543737d8275a879cc46dcb8293574441ce7df5e681f76e6cd2fc17e14d319e2001d6c41ece5ff3525bf83d19424e1e89a0f6e237c8

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5bJYH:W5ReWjTrW9rNPgYo5JYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5e96008e191e7d957912c604e39fe7111a1f01ca778395944bce2d3056c8f229

    • Size

      50KB

    • MD5

      3e06db34430745198bd5bceb692dfd93

    • SHA1

      275e48808322ef42a6afa79e44f38ee9b2505cac

    • SHA256

      5e96008e191e7d957912c604e39fe7111a1f01ca778395944bce2d3056c8f229

    • SHA512

      14d73cd5b7e45ed37d9684543737d8275a879cc46dcb8293574441ce7df5e681f76e6cd2fc17e14d319e2001d6c41ece5ff3525bf83d19424e1e89a0f6e237c8

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5bJYH:W5ReWjTrW9rNPgYo5JYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks