General

  • Target

    7510fa4ae75a26a536a2c8abcb7af4ece86e9fb0776d70d9436db796cc56bd45

  • Size

    899KB

  • Sample

    240603-nsrtyadb7y

  • MD5

    9e54e74c403c715005d76e3208dc5098

  • SHA1

    c631781fd3fc9e7fd157cf961d0fae217802b916

  • SHA256

    7510fa4ae75a26a536a2c8abcb7af4ece86e9fb0776d70d9436db796cc56bd45

  • SHA512

    cc3c29e260fbc736faf73268104b979271ab2537ee0c411b6fe7e98a528a8270753ab904944e205af256e7814976f12893b3f68477156f2c15e7fd3685e77c10

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7510fa4ae75a26a536a2c8abcb7af4ece86e9fb0776d70d9436db796cc56bd45

    • Size

      899KB

    • MD5

      9e54e74c403c715005d76e3208dc5098

    • SHA1

      c631781fd3fc9e7fd157cf961d0fae217802b916

    • SHA256

      7510fa4ae75a26a536a2c8abcb7af4ece86e9fb0776d70d9436db796cc56bd45

    • SHA512

      cc3c29e260fbc736faf73268104b979271ab2537ee0c411b6fe7e98a528a8270753ab904944e205af256e7814976f12893b3f68477156f2c15e7fd3685e77c10

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks