General

  • Target

    f819bc85b6209b4c547815ea23747114bea0bbaed81cb431cdb69bd0ef9c297b

  • Size

    899KB

  • Sample

    240528-xeerwsgh28

  • MD5

    2c7c7bf86371d5df9fd20aa14e6a12ef

  • SHA1

    f2013683e028842a87842569d4eca91d93a49ff7

  • SHA256

    f819bc85b6209b4c547815ea23747114bea0bbaed81cb431cdb69bd0ef9c297b

  • SHA512

    3d901b7ba1f3c9aed6bb09e0f75b4b86bc8dc9ad432331c5015abddea206c68fd9520b789cd2c11a9b8dcb96d6c2ec37c4538244ab286b07ed4b1926775c6307

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f819bc85b6209b4c547815ea23747114bea0bbaed81cb431cdb69bd0ef9c297b

    • Size

      899KB

    • MD5

      2c7c7bf86371d5df9fd20aa14e6a12ef

    • SHA1

      f2013683e028842a87842569d4eca91d93a49ff7

    • SHA256

      f819bc85b6209b4c547815ea23747114bea0bbaed81cb431cdb69bd0ef9c297b

    • SHA512

      3d901b7ba1f3c9aed6bb09e0f75b4b86bc8dc9ad432331c5015abddea206c68fd9520b789cd2c11a9b8dcb96d6c2ec37c4538244ab286b07ed4b1926775c6307

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks