General

  • Target

    f3481a56aca57969d6326f1f7422b21abfb88d09d94109eafb31c540d60c0a92

  • Size

    899KB

  • Sample

    240517-rq8apabg97

  • MD5

    116b0b842fa1a50625b2984ac1b88fce

  • SHA1

    366613344ee7b32f484738f15547efc43d06706b

  • SHA256

    f3481a56aca57969d6326f1f7422b21abfb88d09d94109eafb31c540d60c0a92

  • SHA512

    faa8f7801d4459705d8633a37885ac1606ea58b60f3bc9aeff04236d4b43e694efbd84b7fa7d0f9ebce8c1d94675e3704157fd8c1f31735bd35890a69b6e0bad

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f3481a56aca57969d6326f1f7422b21abfb88d09d94109eafb31c540d60c0a92

    • Size

      899KB

    • MD5

      116b0b842fa1a50625b2984ac1b88fce

    • SHA1

      366613344ee7b32f484738f15547efc43d06706b

    • SHA256

      f3481a56aca57969d6326f1f7422b21abfb88d09d94109eafb31c540d60c0a92

    • SHA512

      faa8f7801d4459705d8633a37885ac1606ea58b60f3bc9aeff04236d4b43e694efbd84b7fa7d0f9ebce8c1d94675e3704157fd8c1f31735bd35890a69b6e0bad

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks