General

  • Target

    b1514dccb5e8a4a0beb10632b9fac776bb268f89b03d3613de57c0c6b2c68453

  • Size

    899KB

  • Sample

    240428-xz7neaeh69

  • MD5

    0eb15b4e2b1db219ee9b404556ae6e84

  • SHA1

    5d045adf8655b7d954e478b7f87648854de6472a

  • SHA256

    b1514dccb5e8a4a0beb10632b9fac776bb268f89b03d3613de57c0c6b2c68453

  • SHA512

    b8c88256adfec74a5de3450d7fded29f65397016ab25d46601af5c7e6da5b5e4abec633c9416c0229f3285182827eedf25a01fd5039e5fc918554f18871bd92e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      b1514dccb5e8a4a0beb10632b9fac776bb268f89b03d3613de57c0c6b2c68453

    • Size

      899KB

    • MD5

      0eb15b4e2b1db219ee9b404556ae6e84

    • SHA1

      5d045adf8655b7d954e478b7f87648854de6472a

    • SHA256

      b1514dccb5e8a4a0beb10632b9fac776bb268f89b03d3613de57c0c6b2c68453

    • SHA512

      b8c88256adfec74a5de3450d7fded29f65397016ab25d46601af5c7e6da5b5e4abec633c9416c0229f3285182827eedf25a01fd5039e5fc918554f18871bd92e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks