General

  • Target

    c61628dd8ad2bd7ee5e4259310cffabcc0724b5b315403dc8b7d84fb0209a1a6

  • Size

    899KB

  • Sample

    240522-y4y3hafc55

  • MD5

    00d6441b97a597b83b35c6acfde2b12a

  • SHA1

    e21afaef07f8e2ef044bd83cc19336fbbb54dd97

  • SHA256

    c61628dd8ad2bd7ee5e4259310cffabcc0724b5b315403dc8b7d84fb0209a1a6

  • SHA512

    b1afa1cf51b5b041a98e759d5085c5d09b1b779cf12100030e0bfe19def53821c6791c59f32d26e8959f3adef2f220387bddbe10b8131f2a978d2cf545a5d81a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      c61628dd8ad2bd7ee5e4259310cffabcc0724b5b315403dc8b7d84fb0209a1a6

    • Size

      899KB

    • MD5

      00d6441b97a597b83b35c6acfde2b12a

    • SHA1

      e21afaef07f8e2ef044bd83cc19336fbbb54dd97

    • SHA256

      c61628dd8ad2bd7ee5e4259310cffabcc0724b5b315403dc8b7d84fb0209a1a6

    • SHA512

      b1afa1cf51b5b041a98e759d5085c5d09b1b779cf12100030e0bfe19def53821c6791c59f32d26e8959f3adef2f220387bddbe10b8131f2a978d2cf545a5d81a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks