General

  • Target

    ed8ae8217d73ed7539f674a598f551cca12fad95753d7e10e17b78a70fafd2d8

  • Size

    50KB

  • Sample

    240604-2ef26sde9z

  • MD5

    655f7825578136d7e379ece495e3d464

  • SHA1

    bec7c13e608e659dab7fe073ea850bbbe2ec709a

  • SHA256

    ed8ae8217d73ed7539f674a598f551cca12fad95753d7e10e17b78a70fafd2d8

  • SHA512

    ec3aa7c96bc50e5e0e7df138d3ce161e3c05fccf4a43427eeb3aff755b7f8aa09d4bffee55ae1fdd1cd06af70476ce6aabdedabae2a744acb5fcb431d55bb2cf

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5jJYH:W5ReWjTrW9rNPgYohJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ed8ae8217d73ed7539f674a598f551cca12fad95753d7e10e17b78a70fafd2d8

    • Size

      50KB

    • MD5

      655f7825578136d7e379ece495e3d464

    • SHA1

      bec7c13e608e659dab7fe073ea850bbbe2ec709a

    • SHA256

      ed8ae8217d73ed7539f674a598f551cca12fad95753d7e10e17b78a70fafd2d8

    • SHA512

      ec3aa7c96bc50e5e0e7df138d3ce161e3c05fccf4a43427eeb3aff755b7f8aa09d4bffee55ae1fdd1cd06af70476ce6aabdedabae2a744acb5fcb431d55bb2cf

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5jJYH:W5ReWjTrW9rNPgYohJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks