General

  • Target

    182e66f270240d6b199e3413b460eb3e1bda671dc64d9619af950fa4e00b13c1

  • Size

    899KB

  • Sample

    240526-lhlttsdg2w

  • MD5

    2b921652c5da5a3f554224cd728d3f13

  • SHA1

    462b0c61c5c5d8fa7397ab89889eba3bcb50aa85

  • SHA256

    182e66f270240d6b199e3413b460eb3e1bda671dc64d9619af950fa4e00b13c1

  • SHA512

    51fc6f6240ce748eeef1154de099cb59ae3d91fd715b9784bf027b7243dc4692f6b5b9ebe58e32dbf659c5cb673d17c6d8cd834a659c41def0c03064fa7e1ba5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      182e66f270240d6b199e3413b460eb3e1bda671dc64d9619af950fa4e00b13c1

    • Size

      899KB

    • MD5

      2b921652c5da5a3f554224cd728d3f13

    • SHA1

      462b0c61c5c5d8fa7397ab89889eba3bcb50aa85

    • SHA256

      182e66f270240d6b199e3413b460eb3e1bda671dc64d9619af950fa4e00b13c1

    • SHA512

      51fc6f6240ce748eeef1154de099cb59ae3d91fd715b9784bf027b7243dc4692f6b5b9ebe58e32dbf659c5cb673d17c6d8cd834a659c41def0c03064fa7e1ba5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks