General

  • Target

    5d34974fa48b1c256d899a1e45eca91d53e9a5f88aea7dacd75e9db49fee934d

  • Size

    899KB

  • Sample

    240526-pqhnxsde46

  • MD5

    1f3d142727e94e5dbbf9cbec68c188b6

  • SHA1

    f0b8b558cf427e4e1c4f447cc8da89e2dea781a2

  • SHA256

    5d34974fa48b1c256d899a1e45eca91d53e9a5f88aea7dacd75e9db49fee934d

  • SHA512

    14118e373e470e12d72c7f6cab8266aed5b473e9e3fc20acdca6e3d3cc8ed557619f42232afb06286d359c4fbfed1a9f09ea7db3bfd05b291c1ad29a161d948e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5d34974fa48b1c256d899a1e45eca91d53e9a5f88aea7dacd75e9db49fee934d

    • Size

      899KB

    • MD5

      1f3d142727e94e5dbbf9cbec68c188b6

    • SHA1

      f0b8b558cf427e4e1c4f447cc8da89e2dea781a2

    • SHA256

      5d34974fa48b1c256d899a1e45eca91d53e9a5f88aea7dacd75e9db49fee934d

    • SHA512

      14118e373e470e12d72c7f6cab8266aed5b473e9e3fc20acdca6e3d3cc8ed557619f42232afb06286d359c4fbfed1a9f09ea7db3bfd05b291c1ad29a161d948e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks