General

  • Target

    13e5f527466db2addc8e01db97e9f60016b3b4127ff681844daafaeec421c184

  • Size

    899KB

  • Sample

    240525-t548paag4y

  • MD5

    fe8b8fd8300172341ea5ae2a7e89477b

  • SHA1

    45f81dce5548a10073a00258ee43c6d4677da140

  • SHA256

    13e5f527466db2addc8e01db97e9f60016b3b4127ff681844daafaeec421c184

  • SHA512

    5cab006c557e1ac278b79c2919c744edde412180d677bf90cba76de6e995e01a5399c49cebbe57ea36166647e1ff72029a99c75f339a535d3a71027caafb8f06

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      13e5f527466db2addc8e01db97e9f60016b3b4127ff681844daafaeec421c184

    • Size

      899KB

    • MD5

      fe8b8fd8300172341ea5ae2a7e89477b

    • SHA1

      45f81dce5548a10073a00258ee43c6d4677da140

    • SHA256

      13e5f527466db2addc8e01db97e9f60016b3b4127ff681844daafaeec421c184

    • SHA512

      5cab006c557e1ac278b79c2919c744edde412180d677bf90cba76de6e995e01a5399c49cebbe57ea36166647e1ff72029a99c75f339a535d3a71027caafb8f06

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks