General

  • Target

    21f7dce4c0c5d1e395fb7e657203671aec14131ae4ce4543a2b33a0de9c966ef

  • Size

    899KB

  • Sample

    240429-wvrwqahe2y

  • MD5

    178b7408f1a13f7f2aa05346bed84110

  • SHA1

    7c7e4772812ab2af88be1ecadc6159137d47a6ec

  • SHA256

    21f7dce4c0c5d1e395fb7e657203671aec14131ae4ce4543a2b33a0de9c966ef

  • SHA512

    c2948a9fd21168fc182e928152664e065d910fbb7e6ec47600c8d5dc58c76d6df56c0823484ad453b8c9e4a1646a813fb8220eebf7ae4a36364273ed2219222a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      21f7dce4c0c5d1e395fb7e657203671aec14131ae4ce4543a2b33a0de9c966ef

    • Size

      899KB

    • MD5

      178b7408f1a13f7f2aa05346bed84110

    • SHA1

      7c7e4772812ab2af88be1ecadc6159137d47a6ec

    • SHA256

      21f7dce4c0c5d1e395fb7e657203671aec14131ae4ce4543a2b33a0de9c966ef

    • SHA512

      c2948a9fd21168fc182e928152664e065d910fbb7e6ec47600c8d5dc58c76d6df56c0823484ad453b8c9e4a1646a813fb8220eebf7ae4a36364273ed2219222a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks