General

  • Target

    3bac135b77321a2ce76d63f6227023633b691837f22eef1cc610cb81fa17d272

  • Size

    899KB

  • Sample

    240525-tkzsgaaa5x

  • MD5

    51fb57f19c624942f60dc81ce67aeaf4

  • SHA1

    74b566741e205544d20bb509f30d7b7d9f7e1113

  • SHA256

    3bac135b77321a2ce76d63f6227023633b691837f22eef1cc610cb81fa17d272

  • SHA512

    416f05ddb6f7ad822fb418f752e96a46f461bee370fb1d1aef97bd2ff28c48094b5d7c3e21d3dffc04b59c63acde3646c78a926c8e664d729259189873c4aaa8

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXj:7wqd87Vj

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3bac135b77321a2ce76d63f6227023633b691837f22eef1cc610cb81fa17d272

    • Size

      899KB

    • MD5

      51fb57f19c624942f60dc81ce67aeaf4

    • SHA1

      74b566741e205544d20bb509f30d7b7d9f7e1113

    • SHA256

      3bac135b77321a2ce76d63f6227023633b691837f22eef1cc610cb81fa17d272

    • SHA512

      416f05ddb6f7ad822fb418f752e96a46f461bee370fb1d1aef97bd2ff28c48094b5d7c3e21d3dffc04b59c63acde3646c78a926c8e664d729259189873c4aaa8

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXj:7wqd87Vj

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks