General

  • Target

    4176d19a3ace18613deb2882e550bdc6c675bd0cb1de6b9a9cd8c1cdf7a674ae

  • Size

    899KB

  • Sample

    240525-t7hsgabc64

  • MD5

    4642d2ba89a80f10feb1d5be9514d7d5

  • SHA1

    9de1106ca9c33983507d57c5b46cb0cd724d3a1d

  • SHA256

    4176d19a3ace18613deb2882e550bdc6c675bd0cb1de6b9a9cd8c1cdf7a674ae

  • SHA512

    bcb52b3700dc255f488e311313136e085bbab94d5c28d96787cdd05c28db930fbba8797000957e65acf09c0331f183ea95f16c1ea542698b4abf7be4d075378d

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4176d19a3ace18613deb2882e550bdc6c675bd0cb1de6b9a9cd8c1cdf7a674ae

    • Size

      899KB

    • MD5

      4642d2ba89a80f10feb1d5be9514d7d5

    • SHA1

      9de1106ca9c33983507d57c5b46cb0cd724d3a1d

    • SHA256

      4176d19a3ace18613deb2882e550bdc6c675bd0cb1de6b9a9cd8c1cdf7a674ae

    • SHA512

      bcb52b3700dc255f488e311313136e085bbab94d5c28d96787cdd05c28db930fbba8797000957e65acf09c0331f183ea95f16c1ea542698b4abf7be4d075378d

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXM:7wqd87VM

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks