General

  • Target

    2d7f199161d429bd6075edda494c1453e05920a8544f312ac9b8fcf12af3f063

  • Size

    899KB

  • Sample

    240526-11h8zsef44

  • MD5

    947b427f1d7883cecdbae4513103e8c0

  • SHA1

    4f05842fe058f8cd43fb47c07963688fe4b08a50

  • SHA256

    2d7f199161d429bd6075edda494c1453e05920a8544f312ac9b8fcf12af3f063

  • SHA512

    d0189738f8a3746137486657bc0150d7d56179ffb3c12ccd303ae7e035f170470d5a4a555f920a2a3dfb31b04dfaef1ed6c8daefdadaa17a88c8c7c005e1336e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2d7f199161d429bd6075edda494c1453e05920a8544f312ac9b8fcf12af3f063

    • Size

      899KB

    • MD5

      947b427f1d7883cecdbae4513103e8c0

    • SHA1

      4f05842fe058f8cd43fb47c07963688fe4b08a50

    • SHA256

      2d7f199161d429bd6075edda494c1453e05920a8544f312ac9b8fcf12af3f063

    • SHA512

      d0189738f8a3746137486657bc0150d7d56179ffb3c12ccd303ae7e035f170470d5a4a555f920a2a3dfb31b04dfaef1ed6c8daefdadaa17a88c8c7c005e1336e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks