General

  • Target

    7d305c3e6f49b8a3abd48b9a12de82dc8a598ce8da5ea8f7f6d2229b3ac752b1

  • Size

    899KB

  • Sample

    240509-wvzassfg4s

  • MD5

    1272bd7748d9247f7b8a381deacf8357

  • SHA1

    72eb6f9846f014cff8b61ab017b752a295379341

  • SHA256

    7d305c3e6f49b8a3abd48b9a12de82dc8a598ce8da5ea8f7f6d2229b3ac752b1

  • SHA512

    bcdf5475f2e1e3a359947da26d2980422f1c904bbbeaf5f8b7c3a9b99de58376ad14f116c855225631a8f203bbedfc5a6375fd1b67b5ebb1dcbe78ddcb6cdc39

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7d305c3e6f49b8a3abd48b9a12de82dc8a598ce8da5ea8f7f6d2229b3ac752b1

    • Size

      899KB

    • MD5

      1272bd7748d9247f7b8a381deacf8357

    • SHA1

      72eb6f9846f014cff8b61ab017b752a295379341

    • SHA256

      7d305c3e6f49b8a3abd48b9a12de82dc8a598ce8da5ea8f7f6d2229b3ac752b1

    • SHA512

      bcdf5475f2e1e3a359947da26d2980422f1c904bbbeaf5f8b7c3a9b99de58376ad14f116c855225631a8f203bbedfc5a6375fd1b67b5ebb1dcbe78ddcb6cdc39

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks