General

  • Target

    1cf934b1dc840c959f8bdbe5095c7e6192bcac023787fc08310cfb4db0bc503b

  • Size

    899KB

  • Sample

    240524-hvxkbahb96

  • MD5

    3d39cd730fd0dceb25da6ce6ca0a9763

  • SHA1

    48339b69f41ec55249c135236ed2e3622783dbd2

  • SHA256

    1cf934b1dc840c959f8bdbe5095c7e6192bcac023787fc08310cfb4db0bc503b

  • SHA512

    60f11f1b28e2521628958f8868507e4f077816a7bf085e508c5aad5c881208cf346f396fdf6a548a67d03ffc2850490eeef6857804f792ffac796f8f14ae7fc0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1cf934b1dc840c959f8bdbe5095c7e6192bcac023787fc08310cfb4db0bc503b

    • Size

      899KB

    • MD5

      3d39cd730fd0dceb25da6ce6ca0a9763

    • SHA1

      48339b69f41ec55249c135236ed2e3622783dbd2

    • SHA256

      1cf934b1dc840c959f8bdbe5095c7e6192bcac023787fc08310cfb4db0bc503b

    • SHA512

      60f11f1b28e2521628958f8868507e4f077816a7bf085e508c5aad5c881208cf346f396fdf6a548a67d03ffc2850490eeef6857804f792ffac796f8f14ae7fc0

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXc:7wqd87Vc

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks