General

  • Target

    2b3c4cee8f15da8f434bb75cae644120217743825e0d3b0d5aba93f272b2f6ea

  • Size

    899KB

  • Sample

    240527-m2nm7saa42

  • MD5

    6b29dfcb78cace28810377e227beb030

  • SHA1

    4b14c8d9245e36d543a24913fb2fdefb3280c8f8

  • SHA256

    2b3c4cee8f15da8f434bb75cae644120217743825e0d3b0d5aba93f272b2f6ea

  • SHA512

    077aedfb55e6490c2bf655f02c316a1258e3d43912e3d149c9aa94ca5131c7d4f350a2db35ad2af3fd0a48cc220ab23d44259de458c5909a99f94b0c179522ae

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2b3c4cee8f15da8f434bb75cae644120217743825e0d3b0d5aba93f272b2f6ea

    • Size

      899KB

    • MD5

      6b29dfcb78cace28810377e227beb030

    • SHA1

      4b14c8d9245e36d543a24913fb2fdefb3280c8f8

    • SHA256

      2b3c4cee8f15da8f434bb75cae644120217743825e0d3b0d5aba93f272b2f6ea

    • SHA512

      077aedfb55e6490c2bf655f02c316a1258e3d43912e3d149c9aa94ca5131c7d4f350a2db35ad2af3fd0a48cc220ab23d44259de458c5909a99f94b0c179522ae

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks