General

  • Target

    8bb06b50d6003d530810247fd064c6584a709d207678ad3dfd3835bcc6a11ac1

  • Size

    899KB

  • Sample

    240517-rsnztsbf7y

  • MD5

    9f5e68382391970e0b6d59fef3d621a9

  • SHA1

    73a8e11cd7a866d4270ee7f035c71ac33b562132

  • SHA256

    8bb06b50d6003d530810247fd064c6584a709d207678ad3dfd3835bcc6a11ac1

  • SHA512

    2f3fdf90edd3ecaf18ca19d2f90aaa44b76305510a4da51481da8cd4d419396fe8a6cd237cdd4b7840e4e747bf5e6a8b8ad239bdbe30caea233646ca3656cafa

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      8bb06b50d6003d530810247fd064c6584a709d207678ad3dfd3835bcc6a11ac1

    • Size

      899KB

    • MD5

      9f5e68382391970e0b6d59fef3d621a9

    • SHA1

      73a8e11cd7a866d4270ee7f035c71ac33b562132

    • SHA256

      8bb06b50d6003d530810247fd064c6584a709d207678ad3dfd3835bcc6a11ac1

    • SHA512

      2f3fdf90edd3ecaf18ca19d2f90aaa44b76305510a4da51481da8cd4d419396fe8a6cd237cdd4b7840e4e747bf5e6a8b8ad239bdbe30caea233646ca3656cafa

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks