General

  • Target

    bf80c0a0090d58687e3fa212b1e2b8306803d5e2f52d13e038d1f6ce0a352930

  • Size

    899KB

  • Sample

    240528-hsprpaab5v

  • MD5

    d45f2e6d098867249d103356c1016821

  • SHA1

    0c1c2d3b65e95bd62914a4ed686964efdbb5ca66

  • SHA256

    bf80c0a0090d58687e3fa212b1e2b8306803d5e2f52d13e038d1f6ce0a352930

  • SHA512

    1ee0f31729843a2549b0dad75480529ea15d53264ed24e5572375c899999e95221a7880f37903bd41b8dbe458549c916a8610b8ac735aee1c983a80e240b3c60

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      bf80c0a0090d58687e3fa212b1e2b8306803d5e2f52d13e038d1f6ce0a352930

    • Size

      899KB

    • MD5

      d45f2e6d098867249d103356c1016821

    • SHA1

      0c1c2d3b65e95bd62914a4ed686964efdbb5ca66

    • SHA256

      bf80c0a0090d58687e3fa212b1e2b8306803d5e2f52d13e038d1f6ce0a352930

    • SHA512

      1ee0f31729843a2549b0dad75480529ea15d53264ed24e5572375c899999e95221a7880f37903bd41b8dbe458549c916a8610b8ac735aee1c983a80e240b3c60

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks