General

  • Target

    6c39acf9b6c14248c57d91c563b3fc52bda044392ac2f096243c4a8841b7bde5

  • Size

    899KB

  • Sample

    240521-xzzb2afe76

  • MD5

    f53e20290915e5413e6a4451daddc51e

  • SHA1

    53b78828b8948925f2aaae94a0afd67ac12a47c8

  • SHA256

    6c39acf9b6c14248c57d91c563b3fc52bda044392ac2f096243c4a8841b7bde5

  • SHA512

    f123fa9d6301e32eae22e0dac478b2fcb72fb9ada905d3872b30df4ee266b7f2feb8a77e86090c06866fdfc3e628f694d9de41eed71d290c093bef6b32adf632

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      6c39acf9b6c14248c57d91c563b3fc52bda044392ac2f096243c4a8841b7bde5

    • Size

      899KB

    • MD5

      f53e20290915e5413e6a4451daddc51e

    • SHA1

      53b78828b8948925f2aaae94a0afd67ac12a47c8

    • SHA256

      6c39acf9b6c14248c57d91c563b3fc52bda044392ac2f096243c4a8841b7bde5

    • SHA512

      f123fa9d6301e32eae22e0dac478b2fcb72fb9ada905d3872b30df4ee266b7f2feb8a77e86090c06866fdfc3e628f694d9de41eed71d290c093bef6b32adf632

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks