General

  • Target

    1aa262acc8b133995ce70e484e3fd74494df3c7b08b77abb7474a8db0a2d9460

  • Size

    899KB

  • Sample

    240525-hbekdshd96

  • MD5

    9950cc811cf67db0ffc8bb99105bf2a7

  • SHA1

    d2af2de946314a09f667216f18ed80509afbc1f3

  • SHA256

    1aa262acc8b133995ce70e484e3fd74494df3c7b08b77abb7474a8db0a2d9460

  • SHA512

    a4c7062879db6404a0c60383358dece30e8a83194b7e4b44a0198b8d016cf128831c632712103963be2f2a1489d3e1299d731480e9d42161dc8155fdbac7b2b1

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      1aa262acc8b133995ce70e484e3fd74494df3c7b08b77abb7474a8db0a2d9460

    • Size

      899KB

    • MD5

      9950cc811cf67db0ffc8bb99105bf2a7

    • SHA1

      d2af2de946314a09f667216f18ed80509afbc1f3

    • SHA256

      1aa262acc8b133995ce70e484e3fd74494df3c7b08b77abb7474a8db0a2d9460

    • SHA512

      a4c7062879db6404a0c60383358dece30e8a83194b7e4b44a0198b8d016cf128831c632712103963be2f2a1489d3e1299d731480e9d42161dc8155fdbac7b2b1

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks