General

  • Target

    ed59c8208b0be8b28b6d86dd964a1a0d250ab46ae03b74f1443db3a6314b6ef1

  • Size

    899KB

  • Sample

    240812-e5dneazdld

  • MD5

    a1131f7aac3da06a117897d31272f0c4

  • SHA1

    c90d9a3a2bd000df13955cc01e9c80dd7fe8ab92

  • SHA256

    ed59c8208b0be8b28b6d86dd964a1a0d250ab46ae03b74f1443db3a6314b6ef1

  • SHA512

    f26898779f85df2218c66b2e22e93a36b0caa4c57ed8bfdad65e97e2d6b3b2925b15d9f32ae655477019554aae290e0e94c0763b0eb61c51703bfc381badf2b5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ed59c8208b0be8b28b6d86dd964a1a0d250ab46ae03b74f1443db3a6314b6ef1

    • Size

      899KB

    • MD5

      a1131f7aac3da06a117897d31272f0c4

    • SHA1

      c90d9a3a2bd000df13955cc01e9c80dd7fe8ab92

    • SHA256

      ed59c8208b0be8b28b6d86dd964a1a0d250ab46ae03b74f1443db3a6314b6ef1

    • SHA512

      f26898779f85df2218c66b2e22e93a36b0caa4c57ed8bfdad65e97e2d6b3b2925b15d9f32ae655477019554aae290e0e94c0763b0eb61c51703bfc381badf2b5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks