General

  • Target

    015c21804040ae36e674f892bab7911d55c54d61d512d0e1d8ed23ea2c002f9a

  • Size

    899KB

  • Sample

    240517-mb3pfadg23

  • MD5

    e925c9c9cb608a7d6eea16dff555c19b

  • SHA1

    9a51bcac72562c257ba605a211f0dc5188649857

  • SHA256

    015c21804040ae36e674f892bab7911d55c54d61d512d0e1d8ed23ea2c002f9a

  • SHA512

    e230bc3bd712e8f1526918d0e9137ae006aa90ce83f65afe2d061ea744e3c1f619b22cea163884ba6bcdf08b54c712eb161d8505e66f79fbc45565742a796e21

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      015c21804040ae36e674f892bab7911d55c54d61d512d0e1d8ed23ea2c002f9a

    • Size

      899KB

    • MD5

      e925c9c9cb608a7d6eea16dff555c19b

    • SHA1

      9a51bcac72562c257ba605a211f0dc5188649857

    • SHA256

      015c21804040ae36e674f892bab7911d55c54d61d512d0e1d8ed23ea2c002f9a

    • SHA512

      e230bc3bd712e8f1526918d0e9137ae006aa90ce83f65afe2d061ea744e3c1f619b22cea163884ba6bcdf08b54c712eb161d8505e66f79fbc45565742a796e21

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks