General

  • Target

    5d3c105c1f376174b16d38b87c84fc0c9a7a0295a4bd54f18abeb7f6910a58ce

  • Size

    899KB

  • Sample

    240719-gks9gavhlq

  • MD5

    1dbf00241b450bfb6f01c31e673a183e

  • SHA1

    f0797ae7ac39d64764e553a743d87f6734805ed3

  • SHA256

    5d3c105c1f376174b16d38b87c84fc0c9a7a0295a4bd54f18abeb7f6910a58ce

  • SHA512

    845fbe8a8e87778e947fba72ab1f089d2d8af5ea810bb58b507c6600936347ea7531cf6ce611a38d6338d5c87d03b19cdd0703046a7e4589ee33a1f16e74d5d3

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5d3c105c1f376174b16d38b87c84fc0c9a7a0295a4bd54f18abeb7f6910a58ce

    • Size

      899KB

    • MD5

      1dbf00241b450bfb6f01c31e673a183e

    • SHA1

      f0797ae7ac39d64764e553a743d87f6734805ed3

    • SHA256

      5d3c105c1f376174b16d38b87c84fc0c9a7a0295a4bd54f18abeb7f6910a58ce

    • SHA512

      845fbe8a8e87778e947fba72ab1f089d2d8af5ea810bb58b507c6600936347ea7531cf6ce611a38d6338d5c87d03b19cdd0703046a7e4589ee33a1f16e74d5d3

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks