General

  • Target

    27b0a0d42c82adbc9d97d218dd242f668c091831ed0aadeb2b4ef19932989752

  • Size

    899KB

  • Sample

    240526-f6qvsshd39

  • MD5

    b3ec8d72b2b9f707d20cfe06ea15206c

  • SHA1

    2c612ddc07e91b3f0ae1cc4be6faec0594d03d9c

  • SHA256

    27b0a0d42c82adbc9d97d218dd242f668c091831ed0aadeb2b4ef19932989752

  • SHA512

    552310a1ec0c063993d238ccdb5c6a5844ad13a1fc083af20381e623ce57c61357beacb124d4807a9fe9c516cfa28ead06e864dce24617c15d8764e76f94baf5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      27b0a0d42c82adbc9d97d218dd242f668c091831ed0aadeb2b4ef19932989752

    • Size

      899KB

    • MD5

      b3ec8d72b2b9f707d20cfe06ea15206c

    • SHA1

      2c612ddc07e91b3f0ae1cc4be6faec0594d03d9c

    • SHA256

      27b0a0d42c82adbc9d97d218dd242f668c091831ed0aadeb2b4ef19932989752

    • SHA512

      552310a1ec0c063993d238ccdb5c6a5844ad13a1fc083af20381e623ce57c61357beacb124d4807a9fe9c516cfa28ead06e864dce24617c15d8764e76f94baf5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks