General

  • Target

    6b1fd6c81193ba854326dc23bba6b65d89308d32cef3c08393154ad9694c27d9

  • Size

    899KB

  • Sample

    240528-2zbm7aha62

  • MD5

    9c7cbf1d47c8cba1e79fadae4343fdca

  • SHA1

    2e985fa13112e03321580b5e68843fc489bf2c9b

  • SHA256

    6b1fd6c81193ba854326dc23bba6b65d89308d32cef3c08393154ad9694c27d9

  • SHA512

    fb3bd5f3aad28fd80af93979a29ddbf71c2f65e709710c8871c7674fb65d2339119db8ac8d74c777e52e0bda0974a8d1668b97a106550148f679f81ad50b0d79

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      6b1fd6c81193ba854326dc23bba6b65d89308d32cef3c08393154ad9694c27d9

    • Size

      899KB

    • MD5

      9c7cbf1d47c8cba1e79fadae4343fdca

    • SHA1

      2e985fa13112e03321580b5e68843fc489bf2c9b

    • SHA256

      6b1fd6c81193ba854326dc23bba6b65d89308d32cef3c08393154ad9694c27d9

    • SHA512

      fb3bd5f3aad28fd80af93979a29ddbf71c2f65e709710c8871c7674fb65d2339119db8ac8d74c777e52e0bda0974a8d1668b97a106550148f679f81ad50b0d79

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks