General

  • Target

    8fc59aaa91f08e0f2722bdd85a8507ac820ac674ec90a9c6d059b24387fde97c

  • Size

    899KB

  • Sample

    240524-v4rfwadd8t

  • MD5

    0914a13bebb5d098feeeb854cec5382a

  • SHA1

    330bfdc163bea1110396fc01db493997f7c5d9ca

  • SHA256

    8fc59aaa91f08e0f2722bdd85a8507ac820ac674ec90a9c6d059b24387fde97c

  • SHA512

    8a3f2b9ec27b4f51f75dfa30220f05fbbb5116dabab2ab13a543db514400c3115d67dd1fa7f50136edc9f17d10a8aaa96d4b7c00cfbacbdcfaa17a5e41471f57

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      8fc59aaa91f08e0f2722bdd85a8507ac820ac674ec90a9c6d059b24387fde97c

    • Size

      899KB

    • MD5

      0914a13bebb5d098feeeb854cec5382a

    • SHA1

      330bfdc163bea1110396fc01db493997f7c5d9ca

    • SHA256

      8fc59aaa91f08e0f2722bdd85a8507ac820ac674ec90a9c6d059b24387fde97c

    • SHA512

      8a3f2b9ec27b4f51f75dfa30220f05fbbb5116dabab2ab13a543db514400c3115d67dd1fa7f50136edc9f17d10a8aaa96d4b7c00cfbacbdcfaa17a5e41471f57

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks