General

  • Target

    263807203770f885e833aa3e838d062ad3b1cddd445eeabe4f60afff7e80cf57

  • Size

    899KB

  • Sample

    240427-y1h7wafe23

  • MD5

    dab2ea521a7a756eeb3477f9f9621c02

  • SHA1

    a3dd9728359768109828b416eab86138ba1cd3b6

  • SHA256

    263807203770f885e833aa3e838d062ad3b1cddd445eeabe4f60afff7e80cf57

  • SHA512

    fb330a28903cec63eab48d0a9be2fb02c68ace023ac533cf29ceea114d5552f1ef2c831a1c521f2badb8387ccf7e26c831bb06dffd0eddc53881467f90be9f65

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      263807203770f885e833aa3e838d062ad3b1cddd445eeabe4f60afff7e80cf57

    • Size

      899KB

    • MD5

      dab2ea521a7a756eeb3477f9f9621c02

    • SHA1

      a3dd9728359768109828b416eab86138ba1cd3b6

    • SHA256

      263807203770f885e833aa3e838d062ad3b1cddd445eeabe4f60afff7e80cf57

    • SHA512

      fb330a28903cec63eab48d0a9be2fb02c68ace023ac533cf29ceea114d5552f1ef2c831a1c521f2badb8387ccf7e26c831bb06dffd0eddc53881467f90be9f65

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX8:7wqd87V8

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks