General

  • Target

    fa9a7d9f8a296174bcae67f9d5265fde5963aa56b01ea76f448f36b1a2aabdda

  • Size

    899KB

  • Sample

    240512-wy4ppaaa3x

  • MD5

    d0bbac6020721142490a66810cb85d63

  • SHA1

    22edcf7088a7ec750f11b1391a574f316e48b1fc

  • SHA256

    fa9a7d9f8a296174bcae67f9d5265fde5963aa56b01ea76f448f36b1a2aabdda

  • SHA512

    c1acad593486e6984da2d23bf8725f4905d8273b67663d16563a4db21a61522c56fbb8a2d448d92f7e98386a53adeb023d4f85adf1e344ed0696858aa1a64dac

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fa9a7d9f8a296174bcae67f9d5265fde5963aa56b01ea76f448f36b1a2aabdda

    • Size

      899KB

    • MD5

      d0bbac6020721142490a66810cb85d63

    • SHA1

      22edcf7088a7ec750f11b1391a574f316e48b1fc

    • SHA256

      fa9a7d9f8a296174bcae67f9d5265fde5963aa56b01ea76f448f36b1a2aabdda

    • SHA512

      c1acad593486e6984da2d23bf8725f4905d8273b67663d16563a4db21a61522c56fbb8a2d448d92f7e98386a53adeb023d4f85adf1e344ed0696858aa1a64dac

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks