General

  • Target

    d7b6a6b23ae9c586409e454941962f677c3b077a9983c0256ca8e4905cd9c269

  • Size

    899KB

  • Sample

    240511-28fnhade7s

  • MD5

    eb3a7d5551a15f7408c1bb9d31fa1f70

  • SHA1

    b9ac7025fc1d37ece8c39a4336f53a0fc1ad7574

  • SHA256

    d7b6a6b23ae9c586409e454941962f677c3b077a9983c0256ca8e4905cd9c269

  • SHA512

    7aefc8bfc4e4d85b2e01c5a5bb407b90137140e983110ac933587d7431210837e8481bb7478571cb7305009f2888a4a40cb6c15db38cefaaf9553eb2f8882efb

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d7b6a6b23ae9c586409e454941962f677c3b077a9983c0256ca8e4905cd9c269

    • Size

      899KB

    • MD5

      eb3a7d5551a15f7408c1bb9d31fa1f70

    • SHA1

      b9ac7025fc1d37ece8c39a4336f53a0fc1ad7574

    • SHA256

      d7b6a6b23ae9c586409e454941962f677c3b077a9983c0256ca8e4905cd9c269

    • SHA512

      7aefc8bfc4e4d85b2e01c5a5bb407b90137140e983110ac933587d7431210837e8481bb7478571cb7305009f2888a4a40cb6c15db38cefaaf9553eb2f8882efb

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks