General

  • Target

    5c1702d57e5f718e05b7eaf1b08ceebb1b9f67e1401ba3655b4bfcfea8f22c70

  • Size

    899KB

  • Sample

    241111-dd85ka1dnr

  • MD5

    10dfbf5d7d2ed0ca03441e765e0bfce6

  • SHA1

    450469a2d845d43e89e9758f2f4bd720d186e397

  • SHA256

    5c1702d57e5f718e05b7eaf1b08ceebb1b9f67e1401ba3655b4bfcfea8f22c70

  • SHA512

    6fab36454f61e884d64518976144922c10fac2aa06bb6fecfbe47c8dc280a973543e557854790cbe6fc4968f4de47b53c01fd6c0b8a407a67736755842a68d3f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5c1702d57e5f718e05b7eaf1b08ceebb1b9f67e1401ba3655b4bfcfea8f22c70

    • Size

      899KB

    • MD5

      10dfbf5d7d2ed0ca03441e765e0bfce6

    • SHA1

      450469a2d845d43e89e9758f2f4bd720d186e397

    • SHA256

      5c1702d57e5f718e05b7eaf1b08ceebb1b9f67e1401ba3655b4bfcfea8f22c70

    • SHA512

      6fab36454f61e884d64518976144922c10fac2aa06bb6fecfbe47c8dc280a973543e557854790cbe6fc4968f4de47b53c01fd6c0b8a407a67736755842a68d3f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks