Resubmissions

04-05-2024 23:26

240504-3e33dafb5w 10

General

  • Target

    67b026affb29929103b358737c9ef84f9a274e8de04947f9de61a3b31e1bbb56

  • Size

    899KB

  • Sample

    240504-3e33dafb5w

  • MD5

    bdee1e4440bbf427c4321a213cae260e

  • SHA1

    940734c33d7641c0787a7d2013619c9665c14038

  • SHA256

    67b026affb29929103b358737c9ef84f9a274e8de04947f9de61a3b31e1bbb56

  • SHA512

    0a04865e499b5e651217e8a584203d979a5749bc19cc5a2fc075d255b52e6c684367eacd0799b22967e9e338d29685a78545c1f93d269c417f741c7fc25a6ed9

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      67b026affb29929103b358737c9ef84f9a274e8de04947f9de61a3b31e1bbb56

    • Size

      899KB

    • MD5

      bdee1e4440bbf427c4321a213cae260e

    • SHA1

      940734c33d7641c0787a7d2013619c9665c14038

    • SHA256

      67b026affb29929103b358737c9ef84f9a274e8de04947f9de61a3b31e1bbb56

    • SHA512

      0a04865e499b5e651217e8a584203d979a5749bc19cc5a2fc075d255b52e6c684367eacd0799b22967e9e338d29685a78545c1f93d269c417f741c7fc25a6ed9

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks