General

  • Target

    27348b73e5141801f026e39c825c80132e7a6d135dcfa2767f098a7f9f8cf423

  • Size

    899KB

  • Sample

    240524-zhp35sae2w

  • MD5

    1261d1f6dd6219d3b6c03105c332f352

  • SHA1

    8642ed9bad1aa28abefa963502f793ad795e57ed

  • SHA256

    27348b73e5141801f026e39c825c80132e7a6d135dcfa2767f098a7f9f8cf423

  • SHA512

    237642a3d9a2cb5d28fd5cb2ad1d5909c56e1273484e1818f7045cde4f6d3b76210f02832fdbd187212c91ddb5da78f2814edc998a12993a1e8057fcc0fb2c49

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      27348b73e5141801f026e39c825c80132e7a6d135dcfa2767f098a7f9f8cf423

    • Size

      899KB

    • MD5

      1261d1f6dd6219d3b6c03105c332f352

    • SHA1

      8642ed9bad1aa28abefa963502f793ad795e57ed

    • SHA256

      27348b73e5141801f026e39c825c80132e7a6d135dcfa2767f098a7f9f8cf423

    • SHA512

      237642a3d9a2cb5d28fd5cb2ad1d5909c56e1273484e1818f7045cde4f6d3b76210f02832fdbd187212c91ddb5da78f2814edc998a12993a1e8057fcc0fb2c49

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks