General

  • Target

    160300adc47ff10d0c0b79a3df616fd2d221aed59a61bb84eb0b6b63636ab7e7

  • Size

    899KB

  • Sample

    240912-l2hara1fql

  • MD5

    cf748c7644219953aacde92fec267afb

  • SHA1

    eb3f39ff3bc058718b12f8b5c038d31349ccc61e

  • SHA256

    160300adc47ff10d0c0b79a3df616fd2d221aed59a61bb84eb0b6b63636ab7e7

  • SHA512

    48743004c3571b7b946d99e3b5fffa6bae6bd961638b56ba0b51a99cd34e1edd010e7376dcc188686f564bd878c54b9b9388e9b39cc44864fa5af6a8dff95f9d

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      160300adc47ff10d0c0b79a3df616fd2d221aed59a61bb84eb0b6b63636ab7e7

    • Size

      899KB

    • MD5

      cf748c7644219953aacde92fec267afb

    • SHA1

      eb3f39ff3bc058718b12f8b5c038d31349ccc61e

    • SHA256

      160300adc47ff10d0c0b79a3df616fd2d221aed59a61bb84eb0b6b63636ab7e7

    • SHA512

      48743004c3571b7b946d99e3b5fffa6bae6bd961638b56ba0b51a99cd34e1edd010e7376dcc188686f564bd878c54b9b9388e9b39cc44864fa5af6a8dff95f9d

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks