General

  • Target

    5cf81ca87d2b2d01ae145187f2c36e52532581e8cbf6855664dff54da3ed3e30

  • Size

    899KB

  • Sample

    240526-qbkqeafh27

  • MD5

    8480bce6fcac9333d369401703e5b691

  • SHA1

    dabc55329e4a87c9190fe65e3199185b82d1e990

  • SHA256

    5cf81ca87d2b2d01ae145187f2c36e52532581e8cbf6855664dff54da3ed3e30

  • SHA512

    33e35abc7d2762de8976ef9654457d657d241dc167a9088e82d58b0a16d54b4f59b76497080ac9eeec36152579da8575a774cd04cd34123a684af7adda3c5029

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      5cf81ca87d2b2d01ae145187f2c36e52532581e8cbf6855664dff54da3ed3e30

    • Size

      899KB

    • MD5

      8480bce6fcac9333d369401703e5b691

    • SHA1

      dabc55329e4a87c9190fe65e3199185b82d1e990

    • SHA256

      5cf81ca87d2b2d01ae145187f2c36e52532581e8cbf6855664dff54da3ed3e30

    • SHA512

      33e35abc7d2762de8976ef9654457d657d241dc167a9088e82d58b0a16d54b4f59b76497080ac9eeec36152579da8575a774cd04cd34123a684af7adda3c5029

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXk:7wqd87Vk

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks