General

  • Target

    06499990655bb18aff6d866e9bf8ce8fb31408fa50aa3f7d3b9009fd59d5417a

  • Size

    899KB

  • Sample

    240513-wy4dxsgf6w

  • MD5

    cfc67cf7d08c6e80b16267c787b47357

  • SHA1

    c9ea5285873c2cf5ad79fe95edd81c4d1f9c7b5c

  • SHA256

    06499990655bb18aff6d866e9bf8ce8fb31408fa50aa3f7d3b9009fd59d5417a

  • SHA512

    c0995c77a52523dc4b7a4fbbaaed0267c9f5d4ce6b46213a1beeb15755287d28dd524c4a5d92ce1577deec8fe098d35625d16aa3d2819669bf23fd2ccac5c512

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      06499990655bb18aff6d866e9bf8ce8fb31408fa50aa3f7d3b9009fd59d5417a

    • Size

      899KB

    • MD5

      cfc67cf7d08c6e80b16267c787b47357

    • SHA1

      c9ea5285873c2cf5ad79fe95edd81c4d1f9c7b5c

    • SHA256

      06499990655bb18aff6d866e9bf8ce8fb31408fa50aa3f7d3b9009fd59d5417a

    • SHA512

      c0995c77a52523dc4b7a4fbbaaed0267c9f5d4ce6b46213a1beeb15755287d28dd524c4a5d92ce1577deec8fe098d35625d16aa3d2819669bf23fd2ccac5c512

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks