General

  • Target

    747ddd5f8e78ba2a75e11bd6e3f49990d6dd23512f7fa61b303a1df4853916b8

  • Size

    899KB

  • Sample

    240529-hzzv8sfd63

  • MD5

    aabe6a3bce8a8f62e2c504592b8c3af6

  • SHA1

    c60c86dd40b6b791ee303eed4ef3a76c150fb178

  • SHA256

    747ddd5f8e78ba2a75e11bd6e3f49990d6dd23512f7fa61b303a1df4853916b8

  • SHA512

    69537cc911c9047aa82effb680e4922768b6ba044405eeaf1d174e540500e33d715c1aa32a119008b2b50b6f91144aaa5382530db1f779bc1d7e4697daa957b4

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXw:7wqd87Vw

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      747ddd5f8e78ba2a75e11bd6e3f49990d6dd23512f7fa61b303a1df4853916b8

    • Size

      899KB

    • MD5

      aabe6a3bce8a8f62e2c504592b8c3af6

    • SHA1

      c60c86dd40b6b791ee303eed4ef3a76c150fb178

    • SHA256

      747ddd5f8e78ba2a75e11bd6e3f49990d6dd23512f7fa61b303a1df4853916b8

    • SHA512

      69537cc911c9047aa82effb680e4922768b6ba044405eeaf1d174e540500e33d715c1aa32a119008b2b50b6f91144aaa5382530db1f779bc1d7e4697daa957b4

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXw:7wqd87Vw

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks