General

  • Target

    5d0a25d9ff30e2b7fc4de8d8fc37fa630eec2428645d322b88747f8f589a44dd

  • Size

    899KB

  • Sample

    240719-l6ltqsvhlr

  • MD5

    c9f84dc2186cfca0cd9719a4c9cf9fe7

  • SHA1

    61b58814ccea80efdcf3abd5dc735aa8a556eeaa

  • SHA256

    5d0a25d9ff30e2b7fc4de8d8fc37fa630eec2428645d322b88747f8f589a44dd

  • SHA512

    1b3f6f80c9eeaedc732e7a621f3888d09f56f0ef8f1ae07c47be4a394ba9b3b0a8565b6802060d7b675c4cb9205901c6572bb902fdf5c96da570b67f67499876

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5d0a25d9ff30e2b7fc4de8d8fc37fa630eec2428645d322b88747f8f589a44dd

    • Size

      899KB

    • MD5

      c9f84dc2186cfca0cd9719a4c9cf9fe7

    • SHA1

      61b58814ccea80efdcf3abd5dc735aa8a556eeaa

    • SHA256

      5d0a25d9ff30e2b7fc4de8d8fc37fa630eec2428645d322b88747f8f589a44dd

    • SHA512

      1b3f6f80c9eeaedc732e7a621f3888d09f56f0ef8f1ae07c47be4a394ba9b3b0a8565b6802060d7b675c4cb9205901c6572bb902fdf5c96da570b67f67499876

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks