General

  • Target

    211697e3f6f34408549773f6237d246e5da224f4ff24f895f1e2c81e6cf1ecdf

  • Size

    899KB

  • Sample

    240527-lbjqwseh8z

  • MD5

    8630e1847e4b1c9f9539274eb5759337

  • SHA1

    30a21a91df8a64c165055e47f52557855e688410

  • SHA256

    211697e3f6f34408549773f6237d246e5da224f4ff24f895f1e2c81e6cf1ecdf

  • SHA512

    04164efe4da744bf7420a5d1f89a6515f447c73577a3cbf65b0f1618d74c7125b829aeeb516912b989d594d5a690db2cedd3ee54629fc4a8f8a2992d84cbc557

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      211697e3f6f34408549773f6237d246e5da224f4ff24f895f1e2c81e6cf1ecdf

    • Size

      899KB

    • MD5

      8630e1847e4b1c9f9539274eb5759337

    • SHA1

      30a21a91df8a64c165055e47f52557855e688410

    • SHA256

      211697e3f6f34408549773f6237d246e5da224f4ff24f895f1e2c81e6cf1ecdf

    • SHA512

      04164efe4da744bf7420a5d1f89a6515f447c73577a3cbf65b0f1618d74c7125b829aeeb516912b989d594d5a690db2cedd3ee54629fc4a8f8a2992d84cbc557

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks