General

  • Target

    3a96eaeb259213624beb0d678f6c9e0beec02abc06e69844f63d9ecf99e6c135

  • Size

    50KB

  • Sample

    240529-evcncsab6w

  • MD5

    a012156f65d5e99f934e97d2498327e4

  • SHA1

    313c1e98b6d37388b67cd7e77f63eb0d7d377b6e

  • SHA256

    3a96eaeb259213624beb0d678f6c9e0beec02abc06e69844f63d9ecf99e6c135

  • SHA512

    740f2df32ef6f1851fe372cf5c476f04c47cd72dadcbc7bb298b4a8511020e2b50423932c61072aab83e4a469deba2af658c39145ea4e8798c3ee82445bc5d01

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5mJYH:W5ReWjTrW9rNPgYoAJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3a96eaeb259213624beb0d678f6c9e0beec02abc06e69844f63d9ecf99e6c135

    • Size

      50KB

    • MD5

      a012156f65d5e99f934e97d2498327e4

    • SHA1

      313c1e98b6d37388b67cd7e77f63eb0d7d377b6e

    • SHA256

      3a96eaeb259213624beb0d678f6c9e0beec02abc06e69844f63d9ecf99e6c135

    • SHA512

      740f2df32ef6f1851fe372cf5c476f04c47cd72dadcbc7bb298b4a8511020e2b50423932c61072aab83e4a469deba2af658c39145ea4e8798c3ee82445bc5d01

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5mJYH:W5ReWjTrW9rNPgYoAJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks