General

  • Target

    4196638a5144fa2cb482c765319f101ba56c1fdf4a2e0577eb8b9eb27591e505

  • Size

    899KB

  • Sample

    240503-2e5qjaah94

  • MD5

    927f4eafb33900316a40951c89eb21bd

  • SHA1

    ab4005fd88bdcb3ea9f008da517ccc1e296e99cb

  • SHA256

    4196638a5144fa2cb482c765319f101ba56c1fdf4a2e0577eb8b9eb27591e505

  • SHA512

    971422f4daf6d7833df43cdbd5df1adfa2351e19cf336af17270897a77c557fee3aeb7a20bed11cd5b3bf48a85c311ef29f05ad6b0de92785c41395b49b30c8b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4196638a5144fa2cb482c765319f101ba56c1fdf4a2e0577eb8b9eb27591e505

    • Size

      899KB

    • MD5

      927f4eafb33900316a40951c89eb21bd

    • SHA1

      ab4005fd88bdcb3ea9f008da517ccc1e296e99cb

    • SHA256

      4196638a5144fa2cb482c765319f101ba56c1fdf4a2e0577eb8b9eb27591e505

    • SHA512

      971422f4daf6d7833df43cdbd5df1adfa2351e19cf336af17270897a77c557fee3aeb7a20bed11cd5b3bf48a85c311ef29f05ad6b0de92785c41395b49b30c8b

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks