General

  • Target

    fed406c2fbbd4294c7da54a4d94147799c986353bb9235723b7c29cae1f2b32f

  • Size

    899KB

  • Sample

    240526-lav3jaec26

  • MD5

    74ef2e3dd372769419f28a2382f39b7a

  • SHA1

    d58f20082e3479110c1c1ce6c1b79b84dad52ce0

  • SHA256

    fed406c2fbbd4294c7da54a4d94147799c986353bb9235723b7c29cae1f2b32f

  • SHA512

    8d3cb5ad2b72ec69131099aa278a2332a13911c0cbf81f7c9c680c953bce8094fca05fc812901d1f1f94605b98914a115e6084c75ddbdee9ed98c2c021141b6f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fed406c2fbbd4294c7da54a4d94147799c986353bb9235723b7c29cae1f2b32f

    • Size

      899KB

    • MD5

      74ef2e3dd372769419f28a2382f39b7a

    • SHA1

      d58f20082e3479110c1c1ce6c1b79b84dad52ce0

    • SHA256

      fed406c2fbbd4294c7da54a4d94147799c986353bb9235723b7c29cae1f2b32f

    • SHA512

      8d3cb5ad2b72ec69131099aa278a2332a13911c0cbf81f7c9c680c953bce8094fca05fc812901d1f1f94605b98914a115e6084c75ddbdee9ed98c2c021141b6f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks