General

  • Target

    316dd40624884f0c41f39297b5349a26bb012a6d4f28ae49f4d15f354e8b76e9

  • Size

    899KB

  • Sample

    240517-pk26dagh9t

  • MD5

    37434ca528cc009c340a7ac610b52cc0

  • SHA1

    f384baf42856602f0dde256d8b4cf5f320cd2232

  • SHA256

    316dd40624884f0c41f39297b5349a26bb012a6d4f28ae49f4d15f354e8b76e9

  • SHA512

    8b9a054ceac6574b1be7358526f407bdcec61a5229c4c48c6808f832ba812d11a66af84c65cf0e2b846105e41ce4a723745e1aa97505f75bb6bea84b9d314232

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      316dd40624884f0c41f39297b5349a26bb012a6d4f28ae49f4d15f354e8b76e9

    • Size

      899KB

    • MD5

      37434ca528cc009c340a7ac610b52cc0

    • SHA1

      f384baf42856602f0dde256d8b4cf5f320cd2232

    • SHA256

      316dd40624884f0c41f39297b5349a26bb012a6d4f28ae49f4d15f354e8b76e9

    • SHA512

      8b9a054ceac6574b1be7358526f407bdcec61a5229c4c48c6808f832ba812d11a66af84c65cf0e2b846105e41ce4a723745e1aa97505f75bb6bea84b9d314232

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks