General

  • Target

    46a1b39d5936d199314bc0ddbc269de53b7edb8e62fe7ca007d83880b1b964a5

  • Size

    50KB

  • Sample

    240526-gtl7hsab95

  • MD5

    f1c0054ee99926ef0f3a75677e17bee5

  • SHA1

    307576c2c457bf5ad0aad58dad60eb4ca423b5e9

  • SHA256

    46a1b39d5936d199314bc0ddbc269de53b7edb8e62fe7ca007d83880b1b964a5

  • SHA512

    1db8bb2303d1f234d3121ef68a4392ed1204657b684fd5e5e41ffebb055d4e0e474d0ce6b89aec1c0bb2c73302fbc5b042f794110d6af706b113ac473f73f9d7

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5dJYH:W5ReWjTrW9rNPgYoXJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      46a1b39d5936d199314bc0ddbc269de53b7edb8e62fe7ca007d83880b1b964a5

    • Size

      50KB

    • MD5

      f1c0054ee99926ef0f3a75677e17bee5

    • SHA1

      307576c2c457bf5ad0aad58dad60eb4ca423b5e9

    • SHA256

      46a1b39d5936d199314bc0ddbc269de53b7edb8e62fe7ca007d83880b1b964a5

    • SHA512

      1db8bb2303d1f234d3121ef68a4392ed1204657b684fd5e5e41ffebb055d4e0e474d0ce6b89aec1c0bb2c73302fbc5b042f794110d6af706b113ac473f73f9d7

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5dJYH:W5ReWjTrW9rNPgYoXJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks