General

  • Target

    a4abc9bca7bbf2964027b037a46500e3eeb86888ff6839325dd5fc30e1064766

  • Size

    899KB

  • Sample

    240526-pljqesda22

  • MD5

    672075370f8d7aab9dc1ebff0d261a83

  • SHA1

    255d23e9644c0a8490daa008cd7cf3350650b3c4

  • SHA256

    a4abc9bca7bbf2964027b037a46500e3eeb86888ff6839325dd5fc30e1064766

  • SHA512

    aa9f6397fde9d21922837857b27aa2cc86ac960596552f3a4d6ca76013e20f843f2a1299e001c15bb2b2b93d39f21ee685d492e5f85981df9c6c8cf95d4f7ca4

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      a4abc9bca7bbf2964027b037a46500e3eeb86888ff6839325dd5fc30e1064766

    • Size

      899KB

    • MD5

      672075370f8d7aab9dc1ebff0d261a83

    • SHA1

      255d23e9644c0a8490daa008cd7cf3350650b3c4

    • SHA256

      a4abc9bca7bbf2964027b037a46500e3eeb86888ff6839325dd5fc30e1064766

    • SHA512

      aa9f6397fde9d21922837857b27aa2cc86ac960596552f3a4d6ca76013e20f843f2a1299e001c15bb2b2b93d39f21ee685d492e5f85981df9c6c8cf95d4f7ca4

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks