General

  • Target

    ccab41cf423ccf15862819aee676cf6cd4eebc31ca97375c144ae177ddfc7a74N

  • Size

    50KB

  • Sample

    240919-gld6yatgqj

  • MD5

    842b276ad6be4ea7c6c02ad9dbc0e9d0

  • SHA1

    c62b89e630a27b300fb4711bb69eb9c07ff2d3ca

  • SHA256

    ccab41cf423ccf15862819aee676cf6cd4eebc31ca97375c144ae177ddfc7a74

  • SHA512

    9894c81b23a60e6e85972af7b98449b24c3e05790320915bb7ec31f2e891842c977d954a97abaae586970438ebefc0c2ff9665f11457933d90661c00d9261447

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5sJYH:W5ReWjTrW9rNPgYoyJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ccab41cf423ccf15862819aee676cf6cd4eebc31ca97375c144ae177ddfc7a74N

    • Size

      50KB

    • MD5

      842b276ad6be4ea7c6c02ad9dbc0e9d0

    • SHA1

      c62b89e630a27b300fb4711bb69eb9c07ff2d3ca

    • SHA256

      ccab41cf423ccf15862819aee676cf6cd4eebc31ca97375c144ae177ddfc7a74

    • SHA512

      9894c81b23a60e6e85972af7b98449b24c3e05790320915bb7ec31f2e891842c977d954a97abaae586970438ebefc0c2ff9665f11457933d90661c00d9261447

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5sJYH:W5ReWjTrW9rNPgYoyJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks