General

  • Target

    333c5ff2334fb39a164d34a5839b0b01e71a28378c827fd05959dc1d584d4891

  • Size

    899KB

  • Sample

    240528-fgtv6agc52

  • MD5

    2588b646c4f1a2e6ac1a6e09ea6e09fd

  • SHA1

    d22def65c2e7140f60da352560024bb12233111c

  • SHA256

    333c5ff2334fb39a164d34a5839b0b01e71a28378c827fd05959dc1d584d4891

  • SHA512

    991d26beb609a68bb7e3dde944856717327a4446400d8f2016f9c3d160e0904e1ce4a09d33978c1b58200160159beae532f9daccb72820b0a843edf99f4c1920

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      333c5ff2334fb39a164d34a5839b0b01e71a28378c827fd05959dc1d584d4891

    • Size

      899KB

    • MD5

      2588b646c4f1a2e6ac1a6e09ea6e09fd

    • SHA1

      d22def65c2e7140f60da352560024bb12233111c

    • SHA256

      333c5ff2334fb39a164d34a5839b0b01e71a28378c827fd05959dc1d584d4891

    • SHA512

      991d26beb609a68bb7e3dde944856717327a4446400d8f2016f9c3d160e0904e1ce4a09d33978c1b58200160159beae532f9daccb72820b0a843edf99f4c1920

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks