General

  • Target

    51a3dd6fdb0efa4b739d73290f4688ff3a18ffc6dc31cd1bf3691291124f64b3

  • Size

    899KB

  • Sample

    240526-nbrslsgc6s

  • MD5

    a620d9e9e44cb8803f781268f758f1cf

  • SHA1

    330cc7e0340ee525213d03a794ebc5856ff78cdb

  • SHA256

    51a3dd6fdb0efa4b739d73290f4688ff3a18ffc6dc31cd1bf3691291124f64b3

  • SHA512

    04c7989a8038644f6b21cf58b28aab9e3c8d9c786ae07d809c7f14961d5c3f06b4649e162f9fccd1ed77feeaedbbb42b5a1cb2259d2d80ab7e0cc1ff537c6667

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      51a3dd6fdb0efa4b739d73290f4688ff3a18ffc6dc31cd1bf3691291124f64b3

    • Size

      899KB

    • MD5

      a620d9e9e44cb8803f781268f758f1cf

    • SHA1

      330cc7e0340ee525213d03a794ebc5856ff78cdb

    • SHA256

      51a3dd6fdb0efa4b739d73290f4688ff3a18ffc6dc31cd1bf3691291124f64b3

    • SHA512

      04c7989a8038644f6b21cf58b28aab9e3c8d9c786ae07d809c7f14961d5c3f06b4649e162f9fccd1ed77feeaedbbb42b5a1cb2259d2d80ab7e0cc1ff537c6667

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXN:7wqd87VN

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks