General

  • Target

    38e972ecc422e09f9fbe326188b100a3542cea7dadc35063ae9c723bc48141dc

  • Size

    899KB

  • Sample

    240719-l2hlhsvfnl

  • MD5

    6d3ab46fe88602d47ede7ad274039745

  • SHA1

    54310a7d5ccc207c0df5b0108d335c2224e3b86e

  • SHA256

    38e972ecc422e09f9fbe326188b100a3542cea7dadc35063ae9c723bc48141dc

  • SHA512

    7a0bf1597573c302aea9f3ef581b44ff624ad49c4ea905c8f6afd430bb9e65417d8645a1e6752461d10eab3694ca86212d920c3a1c09929c81f59cb7bf18cfd9

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      38e972ecc422e09f9fbe326188b100a3542cea7dadc35063ae9c723bc48141dc

    • Size

      899KB

    • MD5

      6d3ab46fe88602d47ede7ad274039745

    • SHA1

      54310a7d5ccc207c0df5b0108d335c2224e3b86e

    • SHA256

      38e972ecc422e09f9fbe326188b100a3542cea7dadc35063ae9c723bc48141dc

    • SHA512

      7a0bf1597573c302aea9f3ef581b44ff624ad49c4ea905c8f6afd430bb9e65417d8645a1e6752461d10eab3694ca86212d920c3a1c09929c81f59cb7bf18cfd9

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks