General

  • Target

    59410a20ed72d38b43b2b8cf0dab5d630bbd8a6d1767550c7239c705aeba0a52

  • Size

    899KB

  • Sample

    240526-p5dcraec7y

  • MD5

    4e5aec7af13bccb3d4f028771befb797

  • SHA1

    7d6d34a2fab9f6ed4a90978f87e15a6b1558da23

  • SHA256

    59410a20ed72d38b43b2b8cf0dab5d630bbd8a6d1767550c7239c705aeba0a52

  • SHA512

    b7ce6f170ba2863e9d259c9ff95194694bed95337c8754191ceefc906e1907c4de62cedd8b1bf2d72ad1783f28fa4d0d3766024373838a3eb2c9eb79f4c20b71

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      59410a20ed72d38b43b2b8cf0dab5d630bbd8a6d1767550c7239c705aeba0a52

    • Size

      899KB

    • MD5

      4e5aec7af13bccb3d4f028771befb797

    • SHA1

      7d6d34a2fab9f6ed4a90978f87e15a6b1558da23

    • SHA256

      59410a20ed72d38b43b2b8cf0dab5d630bbd8a6d1767550c7239c705aeba0a52

    • SHA512

      b7ce6f170ba2863e9d259c9ff95194694bed95337c8754191ceefc906e1907c4de62cedd8b1bf2d72ad1783f28fa4d0d3766024373838a3eb2c9eb79f4c20b71

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks