General

  • Target

    1d79c98ba487cb7e76c9926512d5254926602baa002d0766f8a1bd1025744c1b

  • Size

    50KB

  • Sample

    240603-lhqssabd83

  • MD5

    1764b6f2f08fa67031dc479ebabca58c

  • SHA1

    e8425bcd39e5c3e32543777a42be9af35990766a

  • SHA256

    1d79c98ba487cb7e76c9926512d5254926602baa002d0766f8a1bd1025744c1b

  • SHA512

    f468fa895a3a7c80d05c66854014135800da1c1f4f0ac0195faa0963cdfc706c00cbc32079b4ff9a4f196d75fbcb1f2575c9adfc8044efe27cce20e4397d7bbe

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5iJYH:W5ReWjTrW9rNPgYoQJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1d79c98ba487cb7e76c9926512d5254926602baa002d0766f8a1bd1025744c1b

    • Size

      50KB

    • MD5

      1764b6f2f08fa67031dc479ebabca58c

    • SHA1

      e8425bcd39e5c3e32543777a42be9af35990766a

    • SHA256

      1d79c98ba487cb7e76c9926512d5254926602baa002d0766f8a1bd1025744c1b

    • SHA512

      f468fa895a3a7c80d05c66854014135800da1c1f4f0ac0195faa0963cdfc706c00cbc32079b4ff9a4f196d75fbcb1f2575c9adfc8044efe27cce20e4397d7bbe

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5iJYH:W5ReWjTrW9rNPgYoQJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks