General

  • Target

    3b4cd8d64ed91ede97bb000798aba9f0663b8c09d0c81ccbe8a9aac0a0e4c218

  • Size

    899KB

  • Sample

    240526-m2rd4agf49

  • MD5

    69f60444f04ce4432f0c85cca0888bbd

  • SHA1

    99ff5f48695243ecda67852997f6ddfe9e4f5d9c

  • SHA256

    3b4cd8d64ed91ede97bb000798aba9f0663b8c09d0c81ccbe8a9aac0a0e4c218

  • SHA512

    7b74f322cb12d3044bda59a74ac0bdd7ce7f9662f926be4853b34b7268ebe26f1f1dcbfdf8051d2072a83d76e6a6d3068072be72dc1bcdf68d0d3029b22287be

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3b4cd8d64ed91ede97bb000798aba9f0663b8c09d0c81ccbe8a9aac0a0e4c218

    • Size

      899KB

    • MD5

      69f60444f04ce4432f0c85cca0888bbd

    • SHA1

      99ff5f48695243ecda67852997f6ddfe9e4f5d9c

    • SHA256

      3b4cd8d64ed91ede97bb000798aba9f0663b8c09d0c81ccbe8a9aac0a0e4c218

    • SHA512

      7b74f322cb12d3044bda59a74ac0bdd7ce7f9662f926be4853b34b7268ebe26f1f1dcbfdf8051d2072a83d76e6a6d3068072be72dc1bcdf68d0d3029b22287be

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks