General

  • Target

    36a49ebadc8e2b813f3b9c5d9ce4310ba1907a7171a14e1225126980c839752e

  • Size

    899KB

  • Sample

    240812-laarlavbpj

  • MD5

    93eea22413bbabaffa4eb113e1073efc

  • SHA1

    28868eaefa9f0371cf83056c30e7d461d2743e7b

  • SHA256

    36a49ebadc8e2b813f3b9c5d9ce4310ba1907a7171a14e1225126980c839752e

  • SHA512

    da010405e0506eba813137286729bfea430fa13ab0358130723d4e089ccafc82d35f8c500faec842031c9ef04e50f84519fa2f7ecfd1b15c48978482ee93ebc7

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      36a49ebadc8e2b813f3b9c5d9ce4310ba1907a7171a14e1225126980c839752e

    • Size

      899KB

    • MD5

      93eea22413bbabaffa4eb113e1073efc

    • SHA1

      28868eaefa9f0371cf83056c30e7d461d2743e7b

    • SHA256

      36a49ebadc8e2b813f3b9c5d9ce4310ba1907a7171a14e1225126980c839752e

    • SHA512

      da010405e0506eba813137286729bfea430fa13ab0358130723d4e089ccafc82d35f8c500faec842031c9ef04e50f84519fa2f7ecfd1b15c48978482ee93ebc7

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks