General

  • Target

    ba756c021b320db102ce1d27d5090060226345ce4719014d5357e7e42f80eb03

  • Size

    899KB

  • Sample

    240811-lxfw5ayeld

  • MD5

    46f60fac09e84e27aab844ffd31c40d4

  • SHA1

    dec35781543e15aa9d2744baf0360a088a909b29

  • SHA256

    ba756c021b320db102ce1d27d5090060226345ce4719014d5357e7e42f80eb03

  • SHA512

    6cc8db996d7003597f06c876b2196c940e59ed7c64ff3deae75356b939f34546c29826d17a9074498f3551ea5eb0c2672cdd8ddb5becd9ad50db192498f46e89

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ba756c021b320db102ce1d27d5090060226345ce4719014d5357e7e42f80eb03

    • Size

      899KB

    • MD5

      46f60fac09e84e27aab844ffd31c40d4

    • SHA1

      dec35781543e15aa9d2744baf0360a088a909b29

    • SHA256

      ba756c021b320db102ce1d27d5090060226345ce4719014d5357e7e42f80eb03

    • SHA512

      6cc8db996d7003597f06c876b2196c940e59ed7c64ff3deae75356b939f34546c29826d17a9074498f3551ea5eb0c2672cdd8ddb5becd9ad50db192498f46e89

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks